ThatAIguyA world of ideas

THE CONSCIOUSNESS ATLAS
Read. Experiment. Follow the evidence.

ConsciousnessLearn · Explore · Joseph Anady

Janady13/missionmatch / README.md

Source identity, revision, and recovered contents.

GitHub sourceSource text recovered

Source identity

FieldRecorded value
Source typeGitHub source
Original recordJanady13/missionmatch / README.md
DateNot specified in source
RepositoryJanady13/missionmatch
Revision720d47fae476b0d38477ae4401697d372b1ea2bc
Branchfeature/opportunity-to-outcome
Path or archive memberREADME.md
Original SHA-256ce07ac432fe96a129beeff049b2fccab438e2607f2c7c7d8fd2037a83dbfae7f
Git blob SHA33bd841df0c181184d5d992c513b42a0b59a831c
Reading-copy SHA-256ce07ac432fe96a129beeff049b2fccab438e2607f2c7c7d8fd2037a83dbfae7f

Original source ↗

Every recorded occurrence

These 36 records contain identical original source bytes. Their paths and revisions remain part of the archive.

Original recordBranch or archiveRevision / identifierOriginal location
Janady13/missionmatch / README.mdfeature/opportunity-to-outcome720d47fae476b0d38477ae4401697d372b1ea2bcOpen original
Janady13/missionmatch / README.mdper-tenant-routing9bde0f9a74b89d01980fa658e5253acda7528d0cOpen original
Janady13/missionmatch / README.mdcollision-deconfliction4ee5a09972608ed89f8377c6665542d5f450f0a6Open original
Janady13/missionmatch / README.mdws6-retrieval6c56e29231ec05735927fa265c97d517499dfeafOpen original
Janady13/missionmatch / README.mdworkstream-a-shared-coree0de03ac3a1ec826bd15d0e048e3b02baa23eeffOpen original
Janady13/missionmatch / README.mdm5-price-to-win41000ad30fff4129fdaf5ec84e15ba14c27d4890Open original
Janady13/missionmatch / README.mdworkstream-c-slatematch5cd60c918301b46ecd6ed3e03e20c395da0062e2Open original
Janady13/missionmatch / README.mdws1-ontology-syncb596f449a32a1016fbd403c36505cc00a1ac9ee6Open original
Janady13/missionmatch / README.mdmaster1e9249840a4302ec82e123b9c9cb6f75badea3e4Open original
Janady13/missionmatch / README.mdws8-teaching-loopc823f0fb6bb2aba0f39001eb6de96f4000d9321fOpen original
Janady13/missionmatch / README.mdw3-ai-staffing-recommendations43d56387270ef4da4cabd794d97ca6a49909bc7dOpen original
Janady13/missionmatch / README.mdmag-substrateb82c7100a492dec67dfd1eda6b3f53def859be35Open original
Janady13/missionmatch / README.mdws3-clearance4b8e7ce594c068621867f9c9deed0ec64ae6c553Open original
Janady13/missionmatch / README.mdworkstream-d-command-center255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9Open original
Janady13/missionmatch / README.mdphase2-eval-fairnessd361af254701975fe239927656ababb56374655eOpen original
Janady13/missionmatch / README.mdworkstream-e-dataflow-deploy433815a042f9741411e60fa553fe72143e9b10dbOpen original
Janady13/missionmatch / README.mdruthless-debug-sweepb7d742f8f032984be3817efffa3eb8b13b651c1fOpen original
Janady13/missionmatch / README.mdtime-to-fill-survivalb66e1e505863d4f17741a4b9ede73509e45bd6c6Open original
Janady13/missionmatch / README.mdai-intelligence-layer5d5ddff70393a197c5f54a45280bb5dd42b24755Open original
Janady13/missionmatch / README.mdgraphrag-foundationb0ddeb9f633fd138d09309d1a17b7d13bc3a67f7Open original
Janady13/missionmatch / README.mdworkstream-a-opportunity-intelligence1675031db74316e100782d063e9eda1a597fe3a1Open original
Janady13/missionmatch / README.mddeploy-and-opsbdacd9d0b4d5998d25fc74bf4007f4c3ec538c7aOpen original
Janady13/missionmatch / README.mdws9-bench-ingestionf585a9ef32fa554663ce1fba9a414a54b6e49cf0Open original
Janady13/missionmatch / README.mdws2-alias-relationshipe4dada4601c6eb101830f9d223a9655dfa120616Open original
Janady13/missionmatch / README.mdpresentation-readinesseb574acaa29d71ce4d0f852572e87c275c79fdb7Open original
Janady13/missionmatch / README.mdvendor-intelligencefe9796a19c261951d3f2565206c0c1b5ac294465Open original
Janady13/missionmatch / README.mdworkstream-b-screenmatch09015496d565a172bcaa15cfe9a8e4b072b13df0Open original
Janady13/missionmatch / README.mdws7-federal-signal6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2Open original
Janady13/missionmatch / README.mdworkstream-e-commercial-stubs4437da660539284a400ee380b9b427a300c369eeOpen original
Janady13/missionmatch / README.mdai-brain-liveaac32fc49c878cc5bca099459307611562d0bac1Open original
Janady13/missionmatch / README.mdworkstream-d-missionmatch3be46ba89edb737182075a2b320509b42dc916f8Open original
Janady13/missionmatch / README.mdphase2-connectorse038d4c687aec16f8bd9bc4d907eea14d91f8704Open original
Janady13/missionmatch / README.mdworkstream-b-sam-contract-awardsd5101cceb98e70000cebb31d3e7ac73d747d3a6dOpen original
Janady13/missionmatch / README.mdw0-aedt-compliance39df94f92b2a33f852481fe1954dabed841524bbOpen original
Janady13/missionmatch / README.mdfeature/aioe-upgrade2178e7298d0e5d9af83afa12402fd587f0ba6ed8Open original
Janady13/missionmatch / README.mdcapture-readinessbae6af7cb2997e819174a9e9cfff5e16067a1975Open original

Recovered source transcript

Download complete source text ↓71 lines · 3.0 KB
# missionMATCH Cleared Workforce Intelligence Platform for US government contractors. Go backend (mm-api), Vite and React frontend, PostgreSQL 16 with pgvector. The grounding doc `docs/STACK_DECISIONS.md` is the law; `CLAUDE.md` holds the hard rules (no Python, no dashes in written output, secrets server side only). ## Build The release build is FIPS validated (linux amd64): ``` make build # mm-api, the sync jobs, and provision-org, all GOFIPS140=v1.0.0 make test # unit suite, no database make ci-gates # the security gates: no X-Org-ID in the release binary, FIPS stamp present ``` Run with `GODEBUG=fips140=on` so the runtime uses the validated module that the build selected. ## Authentication and Accounts (Phase 2) The auth module (`internal/modules/auth`, primitives in `internal/platform/security`) issues opaque server side sessions and feeds the validated org into Postgres RLS, replacing the dev `X-Org-ID` header. Password hashing is PBKDF2 HMAC SHA 256 under the FIPS module; MFA is mandatory TOTP. See `CLAUDE.md` for the locked decisions and `docs/STACK_DECISIONS.md` section 7 for the rationale. ### Secrets All auth secrets load from the environment (on Bubbles, `/etc/missionmatch/api.env`, root owned 0600). Generate each with `openssl rand -base64 32`: ``` MM_CREDENTIAL_PEPPER MM_TOTP_KEK (exactly 32 bytes) MM_CSRF_KEY MM_RECOVERY_LOOKUP_KEY ``` Production also requires `MM_REQUIRE_FIPS=true`, `MM_ALLOW_DEV_HEADER_AUTH=false`, a government `MM_CLOUD`, and a real `MM_DATABASE_URL`; the server refuses to start otherwise. See `.env.example`. ### Bootstrap an organization Org creation is provisioning plus invites only (no public signup). The first org and owner are created by the migrator role: ``` make provision-org NAME="Galapagos Federal Systems" SLUG=galapagos \ EMAIL=owner@example.com OWNER="Owner Name" ``` It prints the org id, the owner user id, and a one time activation token. Delivery is manual at pilot: hand the owner the token, they redeem it at `POST /api/auth/invite/accept` with `{token, password}`, then enroll MFA. Additional users join the same way through `POST /api/users/invite` (an owner or admin, bounded to roles below their own). ### Integration tests The live suite runs against PG16 over Tailscale and is behind the `integration` build tag: ``` MM_APP_DSN=postgres://missionmatch_app:...@100.94.8.94:5432/missionmatch?sslmode=require \ MM_MIGRATOR_DSN=postgres://missionmatch_migrator:...@100.94.8.94:5432/missionmatch?sslmode=require \ make test-integration ``` Apply migrations first with `make migrate-up` (migrator DSN). `make test` excludes this suite. ## Release blocker The dev/pilot Postgres on M4 is NOT reboot durable (PGDATA lives on an external volume that macOS launchd cannot own). Credentials, MFA enrollments, and session state now live there, so a reboot would lock every user out with no recovery. Before this auth ships to any real pilot user, make the database reboot durable with scheduled backups and one tested restore.

Search equations, builds, manuscript text, and recovered sources.