|
| 1 | +[](https://github.com/sponsors/hyperpolymath) |
| 2 | + |
| 3 | +image:https://img.shields.io/badge/License-PMPL--1.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"] |
| 4 | +// SPDX-License-Identifier: MPL-2.0 |
| 5 | +// SPDX-FileCopyrightText: 2025 hyperpolymath |
| 6 | + |
| 7 | += defiant |
| 8 | + |
| 9 | +image:[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"] |
| 10 | +Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk> |
| 11 | +:toc: macro |
| 12 | +:toclevels: 3 |
| 13 | +:icons: font |
| 14 | +:source-highlighter: rouge |
| 15 | +:experimental: |
| 16 | +:url-github: https://github.com/hyperpolymath/defiant |
| 17 | +:url-gitlab: https://gitlab.com/hyperpolymath/defiant |
| 18 | +:url-bitbucket: https://bitbucket.org/hyperpolymath/defiant |
| 19 | +:url-codeberg: https://codeberg.org/hyperpolymath/defiant |
| 20 | + |
| 21 | +*Authorization Bypass Detection Testing Framework* |
| 22 | + |
| 23 | +image:https://img.shields.io/badge/RSR-Certified-gold[RSR Certified,link=https://github.com/hyperpolymath/rhodium-standard-repositories] |
| 24 | +image:https://img.shields.io/badge/Status-Specification-orange[Status: Specification] |
| 25 | +image:https://img.shields.io/badge/Version-0.1.0-blue[Version 0.1.0] |
| 26 | +image:https://img.shields.io/badge/License-PMPL--1.0-blue.svg[License: PMPL-1.0,link="https://github.com/hyperpolymath/palimpsest-license"] |
| 27 | + |
| 28 | +toc::[] |
| 29 | + |
| 30 | +== Project Status |
| 31 | + |
| 32 | +[IMPORTANT] |
| 33 | +==== |
| 34 | +*This repository is currently at the specification and infrastructure stage.* |
| 35 | + |
| 36 | +The CI/CD pipelines, language policies, and project scaffolding are complete. + |
| 37 | +The core framework implementation is forthcoming. |
| 38 | +==== |
| 39 | + |
| 40 | +== What is Defiant? |
| 41 | + |
| 42 | +Defiant is a testing framework for **authorization bypass detection** — designed to help security professionals and developers identify access control vulnerabilities in their systems. |
| 43 | + |
| 44 | +=== Intended Capabilities |
| 45 | + |
| 46 | +* Detection of authorization bypass patterns |
| 47 | +* Testing framework for access control validation |
| 48 | +* Integration with security testing pipelines |
| 49 | +* Compliance with RSR (Rhodium Standard Repository) guidelines |
| 50 | + |
| 51 | +== Current Repository Contents |
| 52 | + |
| 53 | +[cols="2,3,1"] |
| 54 | +|=== |
| 55 | +| Component | Description | Status |
| 56 | + |
| 57 | +| CI/CD Infrastructure |
| 58 | +| 11 GitHub Actions workflows enforcing language policy, security standards, and quality gates |
| 59 | +| ✓ Complete |
| 60 | + |
| 61 | +| Language Policy |
| 62 | +| RSR-compliant stack (Rust, ReScript, Deno, Gleam, Guile Scheme) |
| 63 | +| ✓ Complete |
| 64 | + |
| 65 | +| Security Policy Enforcement |
| 66 | +| Blocks weak crypto, HTTP URLs, hardcoded secrets |
| 67 | +| ✓ Complete |
| 68 | + |
| 69 | +| Multi-Mirror Distribution |
| 70 | +| Synchronized to GitHub, GitLab, Bitbucket, Codeberg |
| 71 | +| ✓ Complete |
| 72 | + |
| 73 | +| Core Framework |
| 74 | +| Authorization bypass detection engine |
| 75 | +| ○ Pending |
| 76 | + |
| 77 | +| Test Suites |
| 78 | +| Framework validation and example tests |
| 79 | +| ○ Pending |
| 80 | + |
| 81 | +| Documentation |
| 82 | +| Usage guides and API reference |
| 83 | +| ○ Pending |
| 84 | +|=== |
| 85 | + |
| 86 | +== Technology Stack |
| 87 | + |
| 88 | +Defiant follows the link:https://github.com/hyperpolymath/rhodium-standard-repositories[Rhodium Standard Repository (RSR)] guidelines. |
| 89 | + |
| 90 | +== Installation |
| 91 | + |
| 92 | +[source,bash] |
| 93 | +---- |
| 94 | +# Clone from GitHub (primary) |
| 95 | +git clone https://github.com/hyperpolymath/defiant |
| 96 | + |
| 97 | +# Or from mirrors |
| 98 | +git clone https://gitlab.com/hyperpolymath/defiant |
| 99 | +git clone https://codeberg.org/hyperpolymath/defiant |
| 100 | +---- |
| 101 | + |
| 102 | +=== Package Managers |
| 103 | + |
| 104 | +[source,bash] |
| 105 | +---- |
| 106 | +# Guix (preferred) |
| 107 | +guix shell -f guix.scm |
| 108 | + |
| 109 | +# Nix (fallback) |
| 110 | +nix develop # when flake.nix is available |
| 111 | +---- |
| 112 | + |
| 113 | +== Mirrors |
| 114 | + |
| 115 | +[cols="1,2"] |
| 116 | +|=== |
| 117 | +| Platform | URL |
| 118 | + |
| 119 | +| GitHub (primary) |
| 120 | +| {url-github} |
| 121 | + |
| 122 | +| GitLab |
| 123 | +| {url-gitlab} |
| 124 | + |
| 125 | +| Bitbucket |
| 126 | +| {url-bitbucket} |
| 127 | + |
| 128 | +| Codeberg |
| 129 | +| {url-codeberg} |
| 130 | +|=== |
| 131 | + |
| 132 | +== Roadmap |
| 133 | + |
| 134 | +See link:ROADMAP.adoc[ROADMAP.adoc] for the development plan. |
| 135 | + |
| 136 | +== License |
| 137 | + |
| 138 | +Dual-licensed under: |
| 139 | + |
| 140 | +* Palimpsest-MPL-1.0 License |
| 141 | +* MPL-2.0 |
| 142 | + |
| 143 | +With additional philosophical overlay: LicenseRef-Palimpsest-0.5 |
| 144 | + |
| 145 | +See link:LICENSE.txt[LICENSE.txt] for details. |
| 146 | + |
| 147 | +== Citation |
| 148 | + |
| 149 | +See link:docs/CITATIONS.adoc[docs/CITATIONS.adoc] for citation formats. |
| 150 | + |
| 151 | +== Contributing |
| 152 | + |
| 153 | +See link:CONTRIBUTING.adoc[CONTRIBUTING.adoc] (forthcoming). |
| 154 | + |
| 155 | +== Metadata |
| 156 | + |
| 157 | +* *Domain:* software-development, security-testing |
| 158 | +* *Framework:* RSR (Rhodium Standard Repository) |
| 159 | +* *Author:* Jonathan D.A. Jewell |
| 160 | +* *ORCID:* 0000-0002-1234-5678 |
| 161 | + |
| 162 | + |
| 163 | +== Architecture |
| 164 | + |
| 165 | +See link:TOPOLOGY.md[TOPOLOGY.md] for a visual architecture map and completion dashboard. |
0 commit comments