brahma-edge 0.1.0

Read-only edge daemon that connects a client's local acoustic repo to IDent Dynamics (no audio leaves the box).

Vixen Intelligence | IDent Dynamics

brahma-edge

A small, read-only edge daemon that connects a client's local acoustic data repository to IDent Dynamics allowing recordings to be browsed, streamed, and searched from IDent Dynamics without the audio ever leaving the client's server.

• Pure Python standard library (Python ≥ 3.7 — runs on 3.7.5). soundfile is an optional extra, used only for richer per-folder metadata (duration / sample-rate / channels).
• No database, no model code, no write surface — every non-read route returns 404.
• Apache-2.0 licensed.

Security

• The daemon is read-only. There is no path that writes, deletes, or executes.
• Bearer-token auth on every route but /healthz.
• Path traversal is blocked by an allow-list on names plus a realpath sandbox to the repo root.
• The reverse-tunnel key on the central host should be locked down with no-pty,no-agent-forwarding,no-X11-forwarding,permitlisten="127.0.0.1:<port>" (see CONNECTING.md step 0.5)
• permitlisten for the -R forward, no shell, and a Match User tunnel → AllowTcpForwarding remote block to block -L.
• Contact [e-mail] for more security information.