mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
1.9 KiB
1.9 KiB
Standards and References - Envelope Encryption with AWS KMS
AWS Documentation
AWS KMS Developer Guide
- URL: https://docs.aws.amazon.com/kms/latest/developerguide/
- Envelope Encryption: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#enveloping
AWS KMS API Reference
- GenerateDataKey: https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html
- Decrypt: https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html
- ReEncrypt: https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html
AWS Encryption SDK
- URL: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/
- Python: https://aws-encryption-sdk-python.readthedocs.io/
Cryptographic Standards
NIST SP 800-57 Part 1 - Key Management
- URL: https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/final
- Relevance: Key hierarchy and key wrapping concepts
NIST SP 800-38F - Key Wrap
- URL: https://csrc.nist.gov/publications/detail/sp/800-38f/final
- Description: AES Key Wrap specification used by KMS internally
FIPS 140-2 Level 2 (KMS HSMs)
- Description: KMS HSMs are validated at FIPS 140-2 Level 2 (Level 3 for CloudHSM)
Compliance Frameworks
PCI DSS v4.0 Requirement 3
- Key management with separation of DEK and KEK
- KMS satisfies key management requirements
SOC 2 Type II
- AWS KMS is SOC 2 compliant
- Encryption controls map to CC6.1 (logical access controls)
HIPAA
- KMS encryption satisfies encryption requirements for ePHI
- BAA required with AWS
Python Libraries
boto3 (AWS SDK for Python)
- URL: https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/kms.html
- PyPI: https://pypi.org/project/boto3/
aws-encryption-sdk
- URL: https://pypi.org/project/aws-encryption-sdk/
- Description: High-level envelope encryption with caching