hop-relay 2.0
hop-relay validates and commits ordered HOP action bundles and, with the net
feature, serves the authenticated vault HTTP API.
Production controls include bounded request bodies and action counts, per-vault writer serialization, timeouts, concurrency and rate limits, exact-origin CORS, admin and per-vault capability tokens, atomic transcript append rollback, versioned snapshots, Ed25519 receipts, readiness probes, structured tracing, and Prometheus metrics.
Bundle validation completes before the first state mutation. If storage fails
after a committed prefix, BundleError reports the exact committed count. The
removed 0.x experimental beacon was a bespoke non-standard construction and is
not part of the 2.0 production surface.
Run locally:
Read the HTTP API, OpenAPI contract, production checklist, and threat model.