Spectra andymccall's projects · #7

• Passkey for the owner and the assurance policy: the human's authority out of agents' reach

  ◇ andymccall/spectra#19 · open

  featuresecurity

• The owner's account: sign in with a passkey, over TLS

  ◇ andymccall/spectrahub#7 · open

  featuresecurity

• Register a Spectra and take its uplink: verify every event and checkpoint

  ◇ andymccall/spectrahub#8 · open

  featuresecurity

• The uplink: spectra serve streams its ledger to a SpectraHub

  ◇ andymccall/spectra#33 · open

  featuresecurity

finished cards are archived after 14 days

• Identities instead of tokens: agents as the owner's Oxygen delegates, signed requests over a Unix socket, ownership shown

  ◇ andymccall/spectra#4 · closed

  featuresecurity

• Tuner: MCP over Streamable HTTP (2026-07-28 and 2025-11-25)

  ◇ andymccall/spectra#7 · closed

  featuresecurity

• Server over TLS: a certificate signed by the instance key, /api/v1/instance, no uid over TCP

  ◇ andymccall/spectra#20 · closed

  featuresecurity

• Remote setup: spectra init --owner KEYID and the owner's claim from the client

  ◇ andymccall/spectra#22 · closed

  featuresecurity

• spectra connect and the TLS client: trust through the owner's delegation, pinned certificate, shims over the network

  ◇ andymccall/spectra#21 · closed

  featuresecurity

• Own identities, signatures and CBOR: Spectra uses Oxygen in no way

  ◇ andymccall/spectra#26 · closed

  featuresecurity

• spectra bridge and spectra probe: sign for the editor, set up without the command line

  ◇ andymccall/spectra#31 · closed

  featuresecurity