| /demarkus-library/plans/phase-5-public-face.md |
0.85 |
Phase 5 — Public Face: the anonymous-read decision \(plan\) |
phase-5, public-face, anonymous-read, read-authz, authz, broker, visibility, public, opengraph, shareable-links, reading-room, demarkus-library, plan, status:draft, type:plan, security, rate-limiting, caching, fail-closed, adr-0005 |
| /demarkus-library/adr/0004-broker-web-sso.md |
0.80 |
ADR 0004 — Broker confidential web client + redirect SSO \(reject device flow\) |
demarkus-library, adr, decision, phase-1b, broker, oauth, web-sso, device-flow, confidential-client, architecture, separation-of-concerns, status:accepted, session-cookie, security, rfc-8252, mcp, authorization-code |
| /demarkus-library/audit-2026-06-18.md |
0.80 |
demarkus-library — Architecture & Code-Quality Audit \(2026-06-18\) |
demarkus-library, audit, code-quality, architecture, robustness, security, csrf, concurrency, ha, replicacount, error-handling, test-coverage, hardening, hexagonal, adr-0002, type:reference, timeouts, body-limit, cache-invalidation, xss, oauth, pkce, broker, session |
| /plans/opencode-knowledge-plugin.md |
0.75 |
OpenCode Knowledge Plugin Port |
plan, plugins, opencode, opencode-knowledge, knowledge-system, oauth, mcp, typescript, policy-gate, completed, pr-review, security, installer, concurrency, uninstall, deadlines, ci, linux |
| /plans/broker-auth-code-grant.md |
0.65 |
Plan: Broker Authorization Code Grant |
plan, broker, oauth, authorization-code, pkce, mcp, oidc, device-flow, refresh-token, discovery, kind-smoke, claude-code, knowledge-join, rfc-8252, redirect-uri, security, universe-onboarding, status:complete |
| /journal/2026-05-31.md |
0.60 |
Journal — 2026-05-31 |
demarkus-memory, plugin, release, lookup, self-documentation, security, journal, broker, auth-code-grant, pkce, kind-smoke, plan-reconciliation, gitignore, coderabbit, oauth, status:complete |
| /journal/2026-05-12.md |
0.60 |
Journal — 2026-05-12 |
journal, demarkus-broker, slice-c, authorization, oidc, groups, allow-emails, sweeper, leader-election, lease, rotate, rate-limit, middleware, x-forwarded-for, coderabbit, universe-deployment, kubernetes, phase-6, decisions, security |
| /journal/2026-03-07.md |
0.60 |
Journal — 2026-03-07 |
journal, mark-append, mcp, expected-version, install-sh, bash, hub, demarkus-hub, discovery, content-addressing, content-hash, sha256, hash-index, security, symlink, spec, copilot-review |
| /plans/security-hardening.md |
0.60 |
Plan: Security Hardening & Documentation — COMPLETE |
plan, status:complete, security, hardening, systemd, chroot, read-only-mode, install-script, demarkus-publish, threat-model, documentation, deployment, tokens, not-permitted, decision |
| /plans/read-auth.md |
0.60 |
Read Auth for Private Networks — COMPLETE |
plan, status:complete, read-auth, authentication, authorization, token-store, private-networks, access-control, handler, fetch, list, versions, content-addressing, glob-patterns, security, go |