1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
Copyright (C) 2026 Doan Luu Duc Tai <doan@luuduct.ai>
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License as
published by the Free Software Foundation, either version 3 of the
License, or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU Affero General Public License for more details.
You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
PROJECT CONVENTIONS
License: GNU Affero General Public License, version 3 or later.
SPDX identifier: AGPL-3.0-or-later.
Copyright holder: Doan Luu Duc Tai <doan@luuduct.ai>, 2026.
Every nontrivial first-party source, configuration, template, and prose
file carries the AGPL copyright and permission header. LICENSE is the
unmodified license text. Binary public keys and empty WKD policy files
retain their protocol format. Generated Cargo.lock retains Cargo's own
metadata as well as the project notice. JSON npm manifests carry the legal
notice in a top-level // metadata field; compiler JSONC files use the usual
header syntax. Keep generated JavaScript legal markers when compiling.
Do not add explanatory source comments. Express intent through structure
and names. Legal headers are the required exception. Use .txt for prose
documentation. The generated HTML license page is an explicit exception.
Rust documentation attributes provide crate metadata without comments.
Keep deployment overrides and configured secrets in the single root .env.
Never commit .env or var/.
Only the root .env.example is published; environment variants and nested
examples are ignored. The commented .env.example publishes supported public
defaults and private placeholders. Public GPG keys, paths, templates, shared
configuration logic, and source belong in Git. Actual public hostnames remain
visible in rendered pages; .env centralization is not an access boundary.
TLS account/certificate private keys, databases, and other generated
private state are persistent data in var/data, not .env configuration.
The GPG secret key and revocation certificate remain outside this project.
STRICTNESS
All enabled Clippy groups and individual rules are forbidden, with no
blanket allow entries. Rust and Rustdoc checks use forbid wherever supported
by generated code. Three Rust settings remain deny for pinned Serde derives;
their unaffected members are independently forbidden. First-party lint
allowances are forbidden. See LINTING.txt for tested workarounds, generated
attribute evidence, and the narrow duplicate-dependency configuration.
Private app namespaces retain narrow internal visibility while both
redundant_pub_crate and unreachable_pub are enforced.
cargo-deny rejects duplicate crate versions, wildcard requirements, unknown
registries, unknown Git sources, and yanked versions. The chat prototype has
exact-version duplicate exceptions reviewed in CHAT-OPENSSL-MIGRATION.txt.
No RustSec advisories are ignored. First-party AGPL and required dependency
license allowances are scoped to their individual packages.
The dependency allowlist retains the requested permissive licenses and
Zlib; an unused allowance may produce an informational audit warning.
Browser logic and automation use strict TypeScript configurations with
separate browser/worker/Node environments and checked untrusted responses.
npm dependencies are exact, development-only, integrity-locked, and installed
with lifecycle scripts disabled. Typed ESLint forbids unsafe any/assertions,
unchecked promises, and suppression directives. Both supported compiler APIs
and npm advisories are checked. See TYPESCRIPT.txt and LINTING.txt.
Human license names follow https://www.gnu.org/licenses/license-list.html.
In particular, display Expat License for SPDX MIT. Do not alter original
copyright notices, legal texts, crate metadata, or machine SPDX identifiers.
cargo-about covers Rust dependencies. Supporting container applications
and their operating-system packages carry additional upstream licenses.
PORTABILITY
All first-party project files and state live below stack/. Standard host
integration consists of packages, subordinate UID/GID allocations, one
low-port sysctl setting, user linger, and a systemd user-service link.
Host SSH keys, firewall policy, accounts, and disks are host administration,
not application export contents.
Releases contain static x86_64 Linux management/chat commands, the WASM
browser crypto module, exact corresponding sources, and native
linux/amd64 container images. They are portable across compatible x86_64
Linux machines. An ARM machine needs a native release build; the command
rejects mismatched production images. Development mode may fetch/build
native images on an architecture mismatch. Container source and Rust
source are public so new targets can be added without restoring an OS.
Generated third-party legal texts retain upstream whitespace and line endings.
.gitattributes exempts only THIRD-PARTY-LICENSES.html from whitespace errors;
first-party source checks remain strict. Workspace audits include every member.
STATIC ASSET CACHING
Main-site stylesheet links include the SHA-256 of web/styles.css as a query
version. Update both website templates when CSS changes. The render test
checks that the published URL matches the current stylesheet, preventing
old cached CSS from being paired with new markup. Tooltip text carries the
native hidden attribute as well as CSS visibility rules, so a stylesheet
failure cannot expose it as ordinary page text.
|
