mi
60 lines
2.8 KiB
Markdown
60 lines
2.8 KiB
Markdown
# HAN Message Safety v2
|
|
|
|
Production-oriented internal FastAPI service for deterministic text, URL and quarantined-file
|
|
safety checks. PostgreSQL is the durable source of truth for idempotency, tasks, leases, fencing,
|
|
caches, audit and immutable config snapshots. Redis is intentionally optional and may only
|
|
accelerate hot-cache/rate/wakeup paths.
|
|
|
|
## Local verification
|
|
|
|
Python 3.12 is required. These commands do not start services:
|
|
|
|
```sh
|
|
python -m pip install -e ".[dev]"
|
|
pytest
|
|
ruff check .
|
|
message-safety-config validate app/artifacts/seed-config.yaml
|
|
```
|
|
|
|
Migrations and config administration require
|
|
`MESSAGE_SAFETY_CONFIG_ADMIN_DATABASE_URL_FILE`. Runtime secrets are accepted only through
|
|
`*_FILE`; the entrypoint rejects missing/empty files without printing their values.
|
|
|
|
```sh
|
|
alembic upgrade head
|
|
message-safety-config create app/artifacts/seed-config.yaml --version 1 --actor migration
|
|
message-safety-config activate --version 1 --approved-by security-owner
|
|
```
|
|
|
|
## Deployment boundary
|
|
|
|
`docker-compose.fragment.yml` is an include fragment for the root VM2 Compose. It publishes no
|
|
host port, runs API and worker as UID 10001 with a read-only filesystem, drops all capabilities,
|
|
and mounts only service-specific secret files. The root project owns networks/secrets and the
|
|
root-owned emergency mode file.
|
|
|
|
## External release gates
|
|
|
|
The following cannot be proven by repository-only tests and must remain fail-closed until the
|
|
target environment verifies them:
|
|
|
|
- Selectel S3 supports version-specific `GetObject`, signed conditional ETag behavior, bucket
|
|
versioning, checksum metadata, virtual-host addressing and a read-only IAM policy without
|
|
list/write/delete.
|
|
- ClamAV engine/signature metadata is supplied to readiness and task cache keys; freshclam
|
|
activate/reload, signature-age alarms and clean/EICAR/malformed corpora pass on VM2.
|
|
- HEIF native decoding and PDF parser sandbox resource limits pass the approved corpus. The
|
|
in-process detector is bounded by 5 MiB and validates active/encrypted PDF markers, but OS-level
|
|
CPU/memory/wall-time isolation must be enforced by the worker container and target runtime.
|
|
- Managed PostgreSQL role grants prove runtime cannot migrate or activate config, while the
|
|
config-admin role can; migration constraint, concurrent activation, lease and fencing tests run
|
|
against PostgreSQL (not SQLite).
|
|
- Trusted resolver, DNS rebinding corpus, S3 canary and worker heartbeat are wired into production
|
|
readiness probes.
|
|
- Image dependencies are resolved to a reviewed lock/SBOM and the final image is pinned by digest
|
|
in the root Compose release manifest.
|
|
- Target load gates (10 text checks/s, 2 file checks/s, 100 pending tasks, five worker slots) and
|
|
privacy/log redaction are verified in production-like infrastructure.
|
|
|
|
No HTTP fetch, redirect following or rendering of user-provided URLs exists in this service.
|