appcore-security 1.0.1-rc.8

Security contracts and token utilities for AppCore Runtime.
Documentation

appcore-security

English | Português | Français

Reusable token, secret, authentication and policy contracts.

HashToken values are signed, not encrypted. Manifests contain secret references, not secret material. Inbound TLS, OAuth, domain authorization and a production managed vault remain external responsibilities.

The 1.0 RC has no TPM or hardware-backed provider. The reviewed 1.1 proposal is documented in docs/tpm.md; it introduces no silent hardware-to-software fallback into the current contracts.

cargo test -p appcore-security