feat: local E2E deployment proof — WordPress behind yacht-agent SQL proxy

Add podman compose stack (MariaDB, yacht-agent, OpenLiteSpeed) with
automated setup and SQL injection verification (6/6 attacks blocked).

Fix Containerfile.agent Wolfi packages (musl→glibc), main Containerfile
yacht-agent runtime (static→wolfi-base), and WordPress adapter stats
field mismatch (now fetches both /stats and /status endpoints).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Jonathan D.A. Jewell

.gitignore

@@ -78,6 +78,9 @@ htmlcov/
 *.tmp
 *.bak
 
+# Local deployment runtime data
+deploy/wharf-local/
+
 # AI/Sync artifacts
 ai-cli-crash-capture/
 .directory

.machine_readable/ECOSYSTEM.scm

@@ -16,4 +16,6 @@
     (project "hypatia" (relationship ci-cd-tool) (description "Neurosymbolic CI/CD security intelligence"))
     (project "gitbot-fleet" (relationship automation) (description "Bot orchestration: rhodibot, echidnabot, sustainabot, glambot, seambot, finishbot"))
     (project "verisimdb-data" (relationship quality-data) (description "Security scan data ingestion for weak point tracking"))
-    (project "wordpress" (relationship adapter-target) (description "Primary CMS adapter — GPL-2.0 dashboard plugin in adapters/wordpress-wharf/"))))
+    (project "wordpress" (relationship adapter-target) (description "Primary CMS adapter — GPL-2.0 dashboard plugin in adapters/wordpress-wharf/"))
+    (project "openlitespeed" (relationship web-server) (description "High-performance web server for local and production deployment (litespeedtech/openlitespeed:1.8.5-lsphp83)"))
+    (project "mariadb" (relationship database-backend) (description "MariaDB 10.11 hidden behind yacht-agent SQL proxy"))))

.machine_readable/META.scm

@@ -29,4 +29,12 @@
     (adr "ebpf-xdp-firewall"
       (status accepted)
       (description "Kernel-level packet filtering via eBPF XDP with nftables fallback.")
-      (rationale "XDP processes packets before the kernel network stack for lowest latency. Cascade to nftables ensures protection without CAP_BPF."))))
+      (rationale "XDP processes packets before the kernel network stack for lowest latency. Cascade to nftables ensures protection without CAP_BPF."))
+    (adr "glibc-runtime-containers"
+      (status accepted)
+      (description "Yacht-agent containers use wolfi-base runtime (glibc) instead of static/distroless.")
+      (rationale "Wolfi Rust toolchain produces glibc-linked binaries. Static image has no glibc, causing runtime segfaults. Wolfi-base provides glibc with minimal attack surface."))
+    (adr "ols-local-deployment"
+      (status accepted)
+      (description "Local deployment uses OpenLiteSpeed with WordPress behind yacht-agent SQL proxy.")
+      (rationale "OLS provides native PHP LSAPI (faster than FastCGI), WordPress connects to agent:3306 which parses SQL AST before forwarding to MariaDB."))))

.machine_readable/STATE.scm

@@ -26,7 +26,13 @@
       (sub-milestone "hack-me-challenge" (status complete) (description "HACK-ME-CHALLENGE.adoc with rules of engagement and technical details"))
       (sub-milestone "wordpress-adapter" (status complete) (description "GPL-2.0 PHP plugin for wp-admin dashboard widget + admin bar indicator"))
       (sub-milestone "systemd-packaging" (status complete) (description "yacht-agent.service with full systemd hardening"))
-      (sub-milestone "tooling-enrollment" (status complete) (description "Bot directives, panic-attacker workflow, AI manifest updated"))))
+      (sub-milestone "tooling-enrollment" (status complete) (description "Bot directives, panic-attacker workflow, AI manifest updated")))
+    (milestone "local-deployment-proof" (status complete) (description "End-to-end local deployment with podman compose")
+      (sub-milestone "containerfile-fixes" (status complete) (description "Fixed Wolfi packages in Containerfile.agent (musl→glibc), yacht-agent runtime stage (static→wolfi-base)"))
+      (sub-milestone "wordpress-adapter-fix" (status complete) (description "Fixed stats/status field mismatch — now fetches both /stats and /status endpoints"))
+      (sub-milestone "compose-stack" (status complete) (description "3-service compose: MariaDB, yacht-agent proxy, OpenLiteSpeed+WordPress"))
+      (sub-milestone "automated-setup" (status complete) (description "local-test.sh: WP download, real salt keys, wp-config.php, adapter plugin, build+start"))
+      (sub-milestone "sqli-verification" (status complete) (description "verify-sqli.sh: 6/6 attacks blocked (SELECT passes, INSERT/DROP/ALTER/TRUNCATE/UNION blocked)"))))
   (components
     (component "wharf-core" (path "crates/wharf-core") (role "shared library: crypto, fleet, integrity, mooring, sync"))
     (component "wharf-cli" (path "bin/wharf-cli") (role "offline admin CLI: moor, integrity, fleet management"))

AI.a2ml

@@ -24,6 +24,14 @@
 - AST-aware SQL proxy blocks injection at wire level
 - Fail-closed: if it can't verify, it blocks
 
+## Local Deployment
+
+- **compose stack**: `deploy/compose.yaml` — 3-service podman compose (db, agent, web)
+- **setup script**: `deploy/local-test.sh` — automated WordPress + stack setup
+- **SQLi proof**: `deploy/verify-sqli.sh` — 6/6 injection attacks provably blocked
+- **Architecture**: Browser→OLS→WordPress→agent:3306 (AST proxy)→MariaDB
+- WordPress `DB_HOST=agent:3306` — all SQL goes through yacht-agent
+
 ## Integration
 
 - **panic-attack**: Weekly security scan via `.github/workflows/security-scan.yml`

CHANGELOG.adoc

@@ -19,6 +19,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Comprehensive Justfile with 50+ recipes
 - RSR (Rhodium Standard Repository) compliance documentation
 
+=== Local Deployment Proof (2026-02-14)
+- *Local compose stack*: `deploy/compose.yaml` with 3-service podman compose (MariaDB, yacht-agent proxy, OpenLiteSpeed+WordPress). Full end-to-end proof.
+- *Containerfile bug fixes*: `Containerfile.agent` fixed Wolfi package names (musl→glibc), main `Containerfile` fixed yacht-agent runtime stage (static→wolfi-base to avoid glibc segfault)
+- *WordPress adapter fix*: `wharf-adapter.php` now fetches both `/stats` and `/status` endpoints, mapping nested JSON to flat format the widget expects
+- *OLS container*: `deploy/Containerfile.ols-local` wrapping litespeedtech/openlitespeed:1.8.5-lsphp83 with WordPress-required PHP extensions
+- *Automated setup*: `deploy/local-test.sh` downloads WordPress, fetches real salt keys, generates wp-config.php with `DB_HOST=agent:3306`, copies adapter plugin, builds and starts stack
+- *SQL injection verification*: `deploy/verify-sqli.sh` proves 6/6 attacks blocked (SELECT passes, INSERT wp_users/DROP/ALTER/TRUNCATE/UNION all blocked), with live agent stats
+
 === V1.0 Shipping Preparation (2026-02-14)
 - *Signature scheme feature flag*: Ed448 now opt-in via `SignatureScheme::Hybrid`; default is `MlDsa87Only` (FIPS 204 peer-reviewed). Configurable via `--signature-scheme` CLI arg and TOML config.
 - *SQL injection smoke tests*: 19 integration tests proving AST-based proxy blocks real WordPress attack patterns (user creation, options manipulation, content defacement, DDL, stacked injection)
@@ -71,7 +79,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 | Version | Date | Highlights |
 |---------|------|------------|
-| Unreleased | 2026-02-14 | V1.0 shipping: signature scheme flag, SQLi tests, deployment package, WordPress adapter, hack-me challenge |
+| Unreleased | 2026-02-14 | Local E2E deployment proof, Containerfile fixes, WordPress adapter stats fix, compose stack, SQLi verification |
 | 0.1.0 | 2025-11-26 | Initial release |
 
 == Upgrade Guide

Containerfile

@@ -31,8 +31,8 @@ COPY --from=builder /build/target/release/wharf /usr/local/bin/wharf
 ENTRYPOINT ["wharf"]
 CMD ["--help"]
 
-# Runtime image for yacht-agent (distroless — zero attack surface)
-FROM cgr.dev/chainguard/static:latest AS yacht-agent
+# Runtime image for yacht-agent (wolfi-base — glibc required)
+FROM cgr.dev/chainguard/wolfi-base:latest AS yacht-agent
 
 COPY --from=builder /build/target/release/yacht-agent /yacht-agent
 

TOPOLOGY.md

@@ -51,6 +51,21 @@
     |  wharf-ebpf (optional, excluded from default build)       |
     |  XDP kernel program + userspace loader (aya 0.12)         |
     +-----------------------------------------------------------+
+
+    LOCAL DEPLOYMENT (deploy/compose.yaml)
+    +-----------------------------------------------------------+
+    |                                                           |
+    |  Browser :8080 → OLS (web) → PHP/WordPress                |
+    |                       ↓                                   |
+    |              agent:3306 (yacht-agent proxy)                |
+    |                   ↓           ↑                           |
+    |              AST SQL parser   /stats /status /health      |
+    |              (sqlparser 0.39) (API :9001)                  |
+    |                   ↓                                       |
+    |              db:3306 (MariaDB 10.11)                       |
+    |                                                           |
+    |  Blocked: INSERT wp_users, DROP, ALTER, TRUNCATE, UNION   |
+    +-----------------------------------------------------------+
 ```
 
 ## Completion Dashboard
@@ -79,8 +94,9 @@
 | - signature scheme     | `[██████████]` 100%         | CLI flag --signature-scheme, config support |
 | **wharf-ebpf**         | `[████████░░]` 80%           | XDP program + loader, needs production testing |
 | **nebula.rs**          | `[██████████]` 100%          | CA, cert signing, IP allocation, revocation |
-| **wordpress-adapter**  | `[██████████]` 100%          | GPL-2.0 dashboard widget + admin bar indicator |
+| **wordpress-adapter**  | `[██████████]` 100%          | GPL-2.0 dashboard widget + admin bar indicator (stats/status fixed) |
 | **deployment**         | `[██████████]` 100%          | setup.sh, DEPLOY.adoc, systemd unit, selur-compose |
+| **local-deploy**       | `[██████████]` 100%          | compose.yaml, local-test.sh, verify-sqli.sh — E2E proven |
 | **Overall**            | `[█████████░]` 95%           | ed448 audit pending, otherwise shipping |
 
 ## Key Dependencies

adapters/wordpress-wharf/wharf-adapter.php

@@ -37,7 +37,13 @@ function wharf_add_dashboard_widget() {
 add_action('wp_dashboard_setup', 'wharf_add_dashboard_widget');
 
 /**
- * Fetch stats from yacht-agent API
+ * Fetch stats and status from yacht-agent API
+ *
+ * Merges /stats (query counters) and /status (mooring, components) into a
+ * flat array the dashboard widget expects.
+ *
+ * /stats returns: {"queries":{"allowed":N,"blocked":N,"audited":N},"mooring_sessions":N,"integrity_checks":N}
+ * /status returns: {"status":"active","moored":bool,"version":"...","components":{...}}
  */
 function wharf_fetch_agent_stats() {
     $cache_key = 'wharf_agent_stats';
@@ -46,24 +52,41 @@ function wharf_fetch_agent_stats() {
         return $cached;
     }
 
-    $response = wp_remote_get(WHARF_AGENT_URL . '/stats', array(
-        'timeout' => 3,
-        'sslverify' => false,
-    ));
+    $request_args = array('timeout' => 3, 'sslverify' => false);
 
-    if (is_wp_error($response)) {
-        return array('error' => $response->get_error_message());
+    // Fetch /stats
+    $stats_response = wp_remote_get(WHARF_AGENT_URL . '/stats', $request_args);
+    if (is_wp_error($stats_response)) {
+        return array('error' => $stats_response->get_error_message());
+    }
+    $stats_data = json_decode(wp_remote_retrieve_body($stats_response), true);
+    if (!is_array($stats_data)) {
+        return array('error' => 'Invalid response from yacht-agent /stats');
     }
 
-    $body = wp_remote_retrieve_body($response);
-    $data = json_decode($body, true);
-
-    if (!is_array($data)) {
-        return array('error' => 'Invalid response from yacht-agent');
+    // Fetch /status
+    $status_response = wp_remote_get(WHARF_AGENT_URL . '/status', $request_args);
+    if (is_wp_error($status_response)) {
+        return array('error' => $status_response->get_error_message());
+    }
+    $status_data = json_decode(wp_remote_retrieve_body($status_response), true);
+    if (!is_array($status_data)) {
+        return array('error' => 'Invalid response from yacht-agent /status');
     }
 
-    set_transient($cache_key, $data, 30); // Cache for 30 seconds
-    return $data;
+    // Map nested responses to flat format for the widget
+    $merged = array(
+        'queries_allowed' => isset($stats_data['queries']['allowed']) ? $stats_data['queries']['allowed'] : 0,
+        'queries_blocked' => isset($stats_data['queries']['blocked']) ? $stats_data['queries']['blocked'] : 0,
+        'queries_audited' => isset($stats_data['queries']['audited']) ? $stats_data['queries']['audited'] : 0,
+        'moored'          => !empty($status_data['moored']),
+        'firewall_mode'   => isset($status_data['components']['shield']) ? $status_data['components']['shield'] : 'unknown',
+        'signature_scheme' => 'ed25519',
+        'version'         => isset($status_data['version']) ? $status_data['version'] : 'unknown',
+    );
+
+    set_transient($cache_key, $merged, 30);
+    return $merged;
 }
 
 /**

deploy/Containerfile.ols-local

@@ -0,0 +1,22 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+# SPDX-FileCopyrightText: 2026 Jonathan D.A. Jewell (hyperpolymath) <jonathan.jewell@open.ac.uk>
+#
+# OpenLiteSpeed local dev image — WordPress-ready with MySQL extensions
+# EXCEPTION: No Chainguard OLS image exists — litespeedtech base required
+
+FROM docker.io/litespeedtech/openlitespeed:1.8.5-lsphp83
+
+# lsphp83-common (bundled in base) provides gd, mbstring, xml, zip
+# Only need to add packages not already included
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    lsphp83-mysql \
+    lsphp83-curl \
+    lsphp83-intl \
+    lsphp83-imagick \
+    lsphp83-redis \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+EXPOSE 8088
+
+WORKDIR /var/www/vhosts/localhost/html