Fixes 4 Cardinal Rule violations identified by Yurii audit: - ERR-TELEMETRY-001/002/003: Fatal error codes for DB init, CA loading, cert verify - ERR-TELEMETRY-010/011/012/013/014: Database error handling in updateSpan() - ERR-TELEMETRY-020/021/022: ntfy alert error codes with context - ERR-TELEMETRY-030/031/032/033: Kuma push error handling (was silent) Per CLAVITOR-AGENT-HANDBOOK.md Part 1: - Every error now has unique ERR-TELEMETRY-XXX code - Database errors in updateSpan() no longer silent - Kuma push failures now logged (was silent with misleading comment) - All errors include actionable context Assignee: Hans Auditor: Yurii Refs: issues/001, issues/002, issues/003, issues/004 |
||
|---|---|---|
| .. | ||
| clavis-android | ||
| clavis-chrome | ||
| clavis-cli | ||
| clavis-crypto | ||
| clavis-firefox | ||
| clavis-ios | ||
| clavis-safari | ||
| clavis-telemetry | ||
| clavis-vault | ||
| .DS_Store | ||
| ._.DS_Store | ||
| Makefile | ||
| README.md | ||
README.md
Clavis
Secure vault platform with multi-client support.
Architecture
Clavis is the vault server. Everything else is a client that talks to it.
Structure
Active Development
| Directory | Purpose | Status |
|---|---|---|
clavis-vault/ |
Vault server with embedded UI (Go, FIPS 140-3) | Active |
clavis-crypto/ |
JavaScript crypto layer | Active |
clavis-cli/ |
CLI for agents | Active |
clavis-chrome/ |
Chrome browser extension | Active |
Planned
| Directory | Purpose | Status |
|---|---|---|
clavis-firefox/ |
Firefox browser extension | Announced |
clavis-safari/ |
Safari browser extension | Announced |
clavis-ios/ |
iOS native app | Announced |
clavis-android/ |
Android native app | Announced |
Build
make deploy # Build + test + restart everything
make deploy-vault # Build + test + restart vault only
make deploy-web # Build + restart website only
make status # Check running processes
make logs-vault # Tail vault logs
make logs-web # Tail web logs
Clients
The vault supports multiple client types:
- Web: Built-in UI served by vault (
clavis-vault/) - CLI: Command-line tool for automation/agents (
clavis-cli/) - Browser Extension: Auto-fill and TOTP in Chrome (
clavis-chrome/) - Mobile: Native iOS/Android apps (planned)
Security
- FIPS 140-3 validated crypto (BoringCrypto via GOEXPERIMENT)
- Zero-knowledge architecture
- Vault server is the single source of truth
License
Proprietary — © Clavitor