| /adr/0037-contract-is-the-protocol-two-doors.md |
0.85 |
ADR 0037: The contract is the protocol; transports are bindings; two doors by credential kind |
adr, decision, protocol, contract, bindings, transport, quic, mcp, http3, two-doors, capability-token, oauth, bearer-listener, souls, local-profile, demarkus-server, memory-broker, supersedes-0033, binary-merge, thin-main |
| /demarkus-library/plans/phase-1b-web-sso.md |
0.85 |
Phase 1b — Web SSO over the Broker \(two-repo plan\) |
demarkus-library, phase-1b, plan, broker, oauth, web-sso, confidential-client, mcp, session, device-flow, loopback, fable, two-repo, pkce, refresh-token, authorization-code, client-registry, status:wip |
| /plans/memory-broker.md |
0.85 |
Memory Broker Plan |
plan, memory-broker, broker, mcp, oauth, memory-as-a-service, provisioning, ha, soul, desktop |
| /adr/0001-broker-confidential-web-clients.md |
0.85 |
ADR 0001: Broker confidential web-client registry |
adr, decision, broker, oauth, confidential-client, web-sso, client-secret, redirect-uri, refresh-token, pkce, status:accepted, promoted |
| /demarkus-library/roadmap.md |
0.82 |
demarkus-library — Roadmap & Resume |
demarkus-library, roadmap, resume, handoff, phase-1b, broker, oauth, mcp, fable, build-model, status, plan, reading-room, trail, floor, phase-3, phase-4, ai-librarian, nib, reader-mode, hardening, deploy, argocd, pane-scroll, observability, status:wip |
| /adr/0011-native-scheme-redirect-allowlist.md |
0.80 |
ADR 0011: Allowlisted private-use scheme redirects for MCP hosts |
adr, decisions, broker, oauth, dcr, rfc-7591, rfc-8252, redirect-uri, cursor, mcp-oauth, native-scheme, allowlist, pkce |
| /adr/0034-broker-state-in-a-dedicated-bucket.md |
0.80 |
ADR 0034: Broker lasting state in a dedicated bucket |
adr, decision, broker, knowledge-server, oauth, refresh-token, rotation, reuse-detection, rfc-9700, per-user-cap, dynamic-clients, rfc-7591, gcs, state-bucket, secrets, scaling, chart, migration |
| /adr/0030-broker-generates-its-cookie-key.md |
0.80 |
ADR 0030: The broker generates and persists its state cookie key |
adr, decision, broker, oauth, cookie, helm, gitops, argocd, secrets |
| /demarkus-library/adr/0004-broker-web-sso.md |
0.80 |
ADR 0004 — Broker confidential web client + redirect SSO \(reject device flow\) |
demarkus-library, adr, decision, phase-1b, broker, oauth, web-sso, device-flow, confidential-client, architecture, separation-of-concerns, status:accepted, session-cookie, security, rfc-8252, mcp, authorization-code |
| /demarkus-library/audit-2026-06-18.md |
0.80 |
demarkus-library — Architecture & Code-Quality Audit \(2026-06-18\) |
demarkus-library, audit, code-quality, architecture, robustness, security, csrf, concurrency, ha, replicacount, error-handling, test-coverage, hardening, hexagonal, adr-0002, type:reference, timeouts, body-limit, cache-invalidation, xss, oauth, pkce, broker, session |