docs: discussions: Alice Engineering Comms: 2024-08-20

docs/discussions/alice_engineering_comms/0668/reply_0000.md

@@ -0,0 +1 @@
+- GITHUB_STEP_SUMMARY

docs/discussions/alice_engineering_comms/0669/index.md

@@ -0,0 +1 @@
+# 2024-06-28 Engineering Logs

docs/discussions/alice_engineering_comms/0669/reply_0000.md

@@ -0,0 +1 @@
+- https://ersei.net/en/blog/fuse-root

docs/discussions/alice_engineering_comms/0669/reply_0001.md

@@ -0,0 +1 @@
+- https://github.com/microsoft/graphrag

docs/discussions/alice_engineering_comms/0670/index.md

@@ -0,0 +1 @@
+# 2024-07-04 Engineering Logs

docs/discussions/alice_engineering_comms/0670/reply_0000.md

@@ -0,0 +1,46 @@
+## 2024-07-04 @pdxjohnny Engineering Logs
+
+- https://docs.mindsdb.com/sdks/python/installation
+- https://docs.mindsdb.com/setup/custom-config
+- https://docs.mindsdb.com/setup/environment-vars
+- https://docs.mindsdb.com/integrations/app-integrations/github
+- https://docs.mindsdb.com/integrations/ai-engines/openai
+- https://docs.mindsdb.com/integrations/ai-engines/rag
+- https://docs.mindsdb.com/integrations/ai-engines/langchain
+- https://docs.mindsdb.com/contribute/install#install-mindsdb-for-development
+- Fallout new vegas as an RTS
+
+```bash
+python -m pip install -U mindsdb_sdk mindsdb
+sudo caddy add-package github.com/greenpau/caddy-security
+```
+
+
+- TODO
+  - [ ] Fix scorecard stuff
+  - [ ] Dev env via API
+    - [ ] #1207
+      - [ ] "You are Alice, what do you have access to"
+    - [ ] Add to dotfiles `forge-install.sh`
+      - [ ] Some kind of fuse to oras layers thing
+      - [ ] Coder deployment
+      - [ ] Asciinema server deployment
+        - [ ] https://docs.asciinema.org/manual/server/self-hosting/
+      - [ ] local llm rust mistral execution engine or something
+      - [ ] Headless (with display capability) chrome browser
+        - [ ] Async Playwright
+      - [ ] SCITT Policy Engine CWT Rebase
+        - [ ] Federation
+      - [ ] GUAC
+      - [ ] kvm capable kubernetes in docker (kata)
+      - [ ] blob storage
+        - [ ] minio
+      - [ ] SMTP
+        - [x] prompt: Is there a production quality rust [memory safe language] SMTP server you know of?
+          - https://stalw.art/docs/install/linux
+      - [ ] FaaS
+        - [ ] Patches and train of thought + history +_ asciiema to changelog and docs (as patches)
+  - [ ] Start from `agi.py` event based approach
+    - [ ] Focus on being able to live view Alice as she does development and jump in at any point
+  - [ ] Format (reuse policy engine with stack frames captured as checkpoint restore?) to track train of thought
+    - [ ] SCITT protected json-ld + ORAS trampoline resource loader

docs/discussions/alice_engineering_comms/0671/index.md

@@ -0,0 +1 @@
+prompt: How can I patch caddy to implement oidc auth in the same fashion as basic auth?

docs/discussions/alice_engineering_comms/0671/reply_0000.md

@@ -0,0 +1,9 @@
+- https://github.com/caddyserver/caddy/commit/68c5c71659109b10226f10873f7dc67102b9dc14
+- https://github.com/mindsdb/mindsdb/issues/9024
+  - https://github.com/mindsdb/mindsdb/pull/9032
+- https://github.com/pdxjohnny/caddy-oidc-auth
+
+```bash
+xcaddy build --with github.com/pdxjohnny/caddy-oidc-auth
+sudo setcap cap_net_bind_service=+ep /usr/bin/caddy
+```

docs/discussions/alice_engineering_comms/0671/reply_0001.md

@@ -0,0 +1,47 @@
+## 2024-07-07 Engineering Logs
+
+- fork is all you need (grep: fork + exec via activitypub)
+  - try federation of forges to trigger fork workflows on synchronize. If it rebases clean, stage it via pr to pr. If it rebases dirty throw it in the ad hoc cve loop. Requires synchronization is an ad hoc cve
+- webhook github attestations to federate to scitt
+- Alice (the architecture) decentralizes the means of production
+  - TCB schema for threat models
+
+```console
+$ python -m pip install -U pip setuptools wheel build && python -m pip install -e .
+# Success!
+$ git log -n 1
+commit 4f9022420a33ef4a5d57ece1f82a0485e5b9ca14 (HEAD -> main, origin/main, origin/HEAD)
+Author: Andrey <[email protected]>
+Date:   Sat Jul 6 00:37:55 2024 +0300
+
+    API handler tests and fixes (#9445)
+$ python --version
+Python 3.10.13
+$ python -m mindsdb --api=http,mongodb,mysql --help
+usage: __main__.py [-h] [--api API] [--config CONFIG] [--install-handlers INSTALL_HANDLERS] [--verbose] [--no_studio] [-v] [--ml_task_queue_consumer]
+
+CL argument for mindsdb server
+
+options:
+  -h, --help            show this help message and exit
+  --api API
+  --config CONFIG
+  --install-handlers INSTALL_HANDLERS
+  --verbose
+  --no_studio
+  -v, --version
+  --ml_task_queue_consumer
+$ python -m pip install "https://github.com/mindsdb/mindsdb/archive/4f9022420a33ef4a5d57ece1f82a0485e5b9ca14.zip#egg=mindsdb"
+```
+
+- If you use the virtual network you should be able to secure tcp sockets at known ports over a custom network. This would make hooking bind events easily via ebpf.
+
+[![asciicast](https://asciinema.org/a/667169.svg)](https://asciinema.org/a/667169)
+
+- https://github.com/cloudflare/boringtun
+  - forgejo keeps changing ports
+
+[![asciicast](https://asciinema.org/a/667174.svg)](https://asciinema.org/a/667174)
+
+- prompt: What is John working on and why?
+  - https://github.com/pdxjohnny/dotfiles/commit/8d9850f85314a9f5c30f5bb7b8e47ba3857357be

docs/discussions/alice_engineering_comms/0672/index.md

@@ -0,0 +1 @@
+- https://github.com/confidential-computing/governance

docs/discussions/alice_engineering_comms/0672/reply_0000.md

@@ -0,0 +1,5 @@
+- https://github.com/occlum/occlum/blob/be4de47940ca6f9c3a9d4873587dfa592b2b2dc6/docs/remote_attestation.md
+- https://occlum.readthedocs.io/en/latest/tutorials/LLM_inference.html
+- https://github.com/mindsdb/mindsdb-js-sdk
+- TODO
+  - [ ] JSON schema for oidc config similar to SCITT for caddy

docs/discussions/alice_engineering_comms/0673/index.md

@@ -0,0 +1,2 @@
+- learn rust
+  - stream

docs/discussions/alice_engineering_comms/0673/reply_0000.md

@@ -0,0 +1 @@
+- https://astral.sh/blog/uv

docs/discussions/alice_engineering_comms/0674/index.md

@@ -0,0 +1 @@
+# 2024-07-11 Engineering Logs

docs/discussions/alice_engineering_comms/0674/reply_0000.md

@@ -0,0 +1,10 @@
+## 2024-07-11 SCITT: AI Agent Workload Identity with LiteLLM Recap
+
+- https://github.com/scitt-community/scitt-api-emulator/pull/37
+- https://github.com/pdxjohnny/litellm/commit/3b6b7427b15c0cadd23a8b5da639e22a2fba5043
+- https://github.com/scitt-community/scitt-api-emulator/commits/1e4ec8844aa1ead539ddfd1ac9b71623e25f4c0d
+- https://mailarchive.ietf.org/arch/msg/scitt/BjCAySWyODuhDWwn4kMtCoY5eDA/
+- https://github.com/search?q=repo%3Aintel%2Fdffml+Phase+0&type=code&p=2
+  - https://github.com/intel/dffml/blob/c50b68c3af49167e9cbfef4c31d4096de9e1846a/docs/discussions/alice_engineering_comms/0572/reply_0000.md
+  - https://github.com/intel/dffml/blob/c50b68c3af49167e9cbfef4c31d4096de9e1846a/docs/discussions/alice_engineering_comms/0573/reply_0000.md
+  - https://github.com/intel/dffml/blob/c50b68c3af49167e9cbfef4c31d4096de9e1846a/docs/discussions/alice_engineering_comms/0574/reply_0000.md

docs/discussions/alice_engineering_comms/0674/reply_0001.md

@@ -0,0 +1,44 @@
+## 2024-07-11 @pdxjohnny Engineering Logs
+
+- Assistants API in Rust, ingest all links and docs and repos for Alice work.
+  - Have Her refactor the existing docs in same writing style / voice
+  - prompt: How would I use the openai assistants API async in rust to upload files, download git repos and upload all the files from all the HEADs of all the branches, and inform the AI of the relationships between this data using neo4j, and have it write documentation based on existing documentation using all it's knowledge? Use pyo3 to create a Python package which wraps the main function and passes neo4j connection paramters, repo url and temp directory for all the repos and the openai credentials, using pydantic classes on the python side
+
+```bash
+mkdir ~/Documents/python/scitt-api-emulator-rust-policy-engine
+cd ~/Documents/python/scitt-api-emulator-rust-policy-engine
+python -m venv .venv \
+  && . .venv/bin/activate \
+  && python -m pip install -U pip setuptools wheel \
+  && python -m pip install maturin \
+  && maturin init --bindings pyo3 \
+  && maturin develop
+```
+
+- rust compiler errors as json
+  - feedback loop
+  - https://rustc-dev-guide.rust-lang.org/diagnostics.html#json-diagnostic-output
+    - > `rustc ... --error-format json`
+- https://duckduckgo.com/?q=site%3Amaturin.rs+rustc&ia=web
+  - https://www.maturin.rs/config#cargo-options
+
+[![asciicast](https://asciinema.org/a/667688.svg)](https://asciinema.org/a/667688)
+
+- https://github.com/openai/GPTs-are-GPTs/blob/36af7ac78d218158fd2070bd8775c86a99f222da/code/gpts_are_gpts_script2.ipynb
+  - > Something weird (Monorepo requires Python 3.11 or later) has happened while importing numpy.exceptions.
+    - *deranged Pythonic laughter*
+- https://github.com/pdxjohnny/scitt-api-emulator/pull/7
+- echo We want an async python lib that is bindings to rust We'll implement the policy engine within rust
+
+[![asciicast](https://asciinema.org/a/667695.svg)](https://asciinema.org/a/667695)
+
+- Let's hook up the policy engine with check suites to compile the rust code
+  - Later let's hook it up to forgejo
+- Got workflow structs compiling
+  - https://github.com/pdxjohnny/scitt-api-emulator/commit/612b5c498c2a9244001f9be0a092d706945bdef6
+
+[![asciicast](https://asciinema.org/a/667709.svg)](https://asciinema.org/a/667709)
+
+- https://docs.rs/pyo3-log/latest/pyo3_log/#interaction-with-python-gil
+- TODO
+  - [x] Clean compile and run and validation of policy engine request objects

docs/discussions/alice_engineering_comms/0675/index.md

@@ -0,0 +1 @@
+- https://www.xda-developers.com/apple-made-a-brand-new-os/

docs/discussions/alice_engineering_comms/0676/index.md

@@ -0,0 +1 @@
+- https://github.com/denosaurs/deno_python

docs/discussions/alice_engineering_comms/0676/reply_0000.md

@@ -0,0 +1 @@
+- https://github.com/ubolonton/denopy/issues/4

docs/discussions/alice_engineering_comms/0677/index.md

@@ -0,0 +1 @@
+- All the major pieces are there

docs/discussions/alice_engineering_comms/0677/reply_0000.md

@@ -0,0 +1,46 @@
+## 2024-07-12 World Domination Council
+
+- SCITT: All the major pieces are there
+- tell me what a registration policy is
+- profile
+  - need extensibility point for policy
+- What are our next steps?
+- Hardware BOM is a huge problem
+- AJ authoring paper
+  - https://csrc.nist.gov/Events/2024/enhancing-security-of-devices-and-components
+  - How to do embargoed vuln sharing
+- Attestation services talking SCITT
+- SARIF output metaschema
+  - https://github.com/usnistgov/metaschema-java/pull/373
+- https://transparency.dev/summit
+  - A.J. Let's get implementation
+- A.J. to chair COSE ActivityPub stuff
+  - Build off ROLI and CBOR and COSE and COAP and ActivityPub
+    - Smallest payload
+    - Deltas
+- https://datatracker.ietf.org/doc/rfc8322/
+- IETF CORAL
+  - As long as we can namspace / actor to urns on same IP, for decentralized k8s
+  - > Think RDF but CBOR avoid everything the SPICE people hate about JSON-LD for RDF in  VC.
+- /acc/
+
+![such-alignment](https://user-images.githubusercontent.com/5950433/226707682-cfa8dbff-0908-4a34-8540-de729c62512f.png)
+
+- https://github.com/slsa-framework/slsa/issues/975
+  - https://github.com/chkimes/image-attestation/commit/bb2033c4398169635e5027723d9b69681ea8d35c#diff-f7657169a0123564242ee2e8ed946c773f89897910eb0b3054f1eaa2c87f3711R21
+    - swtpm measure PCR values put in SCITT
+    - IMA
+    - Hiberation
+      - Disk image
+    - Current client server terminology
+      - Server provides quote
+      - Client verifies
+- in-toto policy working group
+  - https://docs.google.com/document/d/1fcrpj5tD2j3ugmW3-IapaOy69JYGN6PvKBfMa62W53I/edit#heading=h.ab6c414763s0
+    - Ramping
+    - Verificatoin smmary
+    - Backwards compatibility
+- VCS folds into L4 policy engine
+  - https://github.com/gittuf/gittuf
+    - fine grained access control
+- /acc/

docs/discussions/alice_engineering_comms/0678/index.md

@@ -0,0 +1 @@
+- https://github.com/supabase/supabase/pull/21561

docs/discussions/alice_engineering_comms/0679/index.md

@@ -0,0 +1 @@
+#

docs/discussions/alice_engineering_comms/0680/index.md

@@ -0,0 +1,2 @@
+- https://github.com/bullfrogsec/bullfrog?tab=readme-ov-file
+- 

docs/discussions/alice_engineering_comms/0681/index.md

@@ -0,0 +1,3 @@
+- cose blob for bdiffs
+- pyexecl llm query
+- 

docs/discussions/alice_engineering_comms/0681/reply_0000.md

@@ -0,0 +1 @@
+https://github.com/meta-llama/llama-agentic-system

docs/discussions/alice_engineering_comms/0681/reply_0001.md

@@ -0,0 +1,3 @@
+Scitt ietf 120
+
+- AJ made a comment reenforcing our policy engine work as being needed within extension docs (effectively) thank you AJ!

docs/discussions/alice_engineering_comms/0682/index.md

@@ -0,0 +1 @@
+- https://kwasm.sh

docs/discussions/alice_engineering_comms/0682/reply_0000.md

@@ -0,0 +1 @@
+- https://dicedb-docs.netlify.app/tutorials/realtime-leaderboard/

docs/discussions/alice_engineering_comms/0682/reply_0001.md

@@ -0,0 +1 @@
+- https://github.com/pdxjohnny/scitt-api-emulator/pull/8

docs/discussions/alice_engineering_comms/0683/index.md

@@ -0,0 +1 @@
+# 2024-08-02 Engineering Logs

docs/discussions/alice_engineering_comms/0683/reply_0000.md

@@ -0,0 +1,9 @@
+## 2024-08-02 @pdxjohnny Engineering Logs
+
+- https://github.com/DiceDB/dice
+- https://github.com/meilisearch/meilisearch
+  - Use for retrival with agenic rag
+- https://docs.tea.xyz/tea-white-paper/white-paper#staking-to-secure-the-software-supply-chain
+  - 🛤️🛤️🛤️🛤️🛤️🛤️🛤️
+
+![such-alignment](https://user-images.githubusercontent.com/5950433/226707682-cfa8dbff-0908-4a34-8540-de729c62512f.png)

docs/discussions/alice_engineering_comms/0684/index.md

@@ -0,0 +1 @@
+# 2024-08-04 Engineering Logs

docs/discussions/alice_engineering_comms/0684/reply_0000.md

@@ -0,0 +1,4 @@
+## 2024-08-04 @pdxjohnny Engineering Logs
+
+- TODO
+  - [ ] AV stream to inventory

docs/discussions/alice_engineering_comms/0684/reply_0001.md

@@ -0,0 +1 @@
+- https://github.com/comfyanonymous/ComfyUI?tab=readme-ov-file#intel-gpus