Initial Commit

scripts/conformance/crypto-core-allowlist.yml

@@ -0,0 +1,77 @@
+# crypto-core import allowlist
+#
+# Packages on this list MAY import directly from any of:
+#   - @suaveplan/crypto-core (and subpaths)
+#   - @suaveplan/crypto-cipher (and subpaths)
+#   - @suaveplan/crypto-curve (and subpaths)
+#   - @suaveplan/crypto-hash MAC subpaths (hmac and similar)
+#
+# Every other package MUST go through @suaveplan/crypto's opinionated
+# layer (Authority, Packer, Vault). Encoding helpers from
+# @suaveplan/crypto-utils and pure-hash uses from @suaveplan/crypto-hash
+# (sha256/sha384/sha512) remain open.
+#
+# Adding a package to this list requires reviewer approval and a
+# documented rationale. The allowlist is intentionally short; the
+# discipline this gate enforces is the single most important guarantee
+# in restore-crypto-keychain-packer.
+
+allowlist:
+  - "@suaveplan/crypto"
+    # The opinionated layer itself. Composes primitives into the
+    # Authority/Packer/Vault APIs and re-exports the primitive surface
+    # for ergonomic single-package imports.
+
+  - "@suaveplan/crypto-cli"
+    # The keychain CLI. Wraps the opinionated layer for operators.
+    # Imports are routed through @suaveplan/crypto's barrel only.
+
+  - "@suaveplan/crypto-sodium"
+    # libsodium engine adapter for @suaveplan/crypto-core. Implements
+    # the SignEngine / AgreeEngine / AeadEngine / AuthBoxEngine /
+    # SealedBoxEngine interfaces. Engine adapters are by design the
+    # only direct consumers of the primitive engine types.
+
+  - "@suaveplan/crypto-browser"
+    # WebCrypto engine adapter. Same rationale as crypto-sodium.
+
+  - "@suaveplan/bitpacker-crypto"
+    # SignedBitSchema / EnvelopeSchema / HashChainSchema build on
+    # primitives directly to provide bit-packed wire format building
+    # blocks. The opinionated layer (Vault, Packer) is built on top of
+    # bitpacker-crypto, so it cannot itself depend on the opinionated
+    # layer without a cycle.
+
+  - "@suaveplan/slsa"
+    # DSSE PAE signature verification. DSSE is governed by an external
+    # spec (in-toto.io/dsse) without Suaveplan domain tags; the PAE
+    # bytes ARE the message. Verifying via verifyAuthoritySignature
+    # would require fabricating a domain tag that the verifier
+    # contract doesn't have. Builder identity SIGNING (not verifying)
+    # goes through @suaveplan/crypto's Authority — separate concern.
+
+  - "@suaveplan/packer"
+    # Pre-existing chunked AEAD packer (legacy of restore-crypto). To
+    # be migrated to @suaveplan/crypto's Packer in a future change;
+    # allowlisted for now to keep slice 4 reviewable.
+
+  - "@suaveplan/drive-plugin-chunks"
+    # Legacy direct primitive use; same rationale as @suaveplan/packer.
+
+  - "@suaveplan/crypto-core"
+    # crypto-core IS the primitive layer. It composes the
+    # crypto-cipher / crypto-curve / crypto-hash selector packages
+    # internally to expose its public API. Self-imports.
+
+  - "@suaveplan/streams"
+    # streams/transforms/crypto consumes crypto-cipher selectors
+    # directly. Migration to Authority is tracked as a future change.
+
+  - "@suaveplan/audit-logging"
+    # chain-integrity uses HMAC for tamper-evidence. Audit-log MAC is
+    # a low-level primitive that doesn't fit the Authority model.
+
+# Encoding helpers from @suaveplan/crypto-utils stay open for ALL
+# packages. The gate does not flag imports of toHex/fromHex/toBase64/etc.
+encoding_helpers_open:
+  - "@suaveplan/crypto-utils"