[GH-ISSUE #318] Implement Windows native authority Node-API package #163

New issue

Open

opened 2026-10-15 18:21:54 +00:00 by bsakaguchi · 1 comment

bsakaguchi commented

2026-10-15 18:21:54 +00:00

Owner

Originally created by @morluto on GitHub (Jul 20, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/318

Build the native Node-API package that exposes the Windows primitives required by REA's trusted native authority boundary: reparse-safe handle-based file admission, private DACL creation/readback, and Job Object process ownership.

Acceptance:

Native addon compiles for Windows x64 with Node-API.
Each primitive is exposed as a typed, parseable observation that fails closed on unsupported OS/filesystem/reparse-tag.
No pathname-based authority is passed back as proof.
Unit tests on the native boundary shape pass.

Part of #287.

Originally created by @morluto on GitHub (Jul 20, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/318 Build the native Node-API package that exposes the Windows primitives required by REA's trusted native authority boundary: reparse-safe handle-based file admission, private DACL creation/readback, and Job Object process ownership. Acceptance: - Native addon compiles for Windows x64 with Node-API. - Each primitive is exposed as a typed, parseable observation that fails closed on unsupported OS/filesystem/reparse-tag. - No pathname-based authority is passed back as proof. - Unit tests on the native boundary shape pass. Part of #287.

bsakaguchi added the

area: native

P1: high

enhancement

labels

2026-10-15 18:21:54 +00:00

bsakaguchi commented

2026-10-15 18:21:56 +00:00

Author

Owner

@tony-sebastian commented on GitHub (Oct 5, 2026):

I'd like to take this on, per the invitation in #287.

Plan: implement the three primitives as a Node-API addon under the accepted ADR-0004 shape — typed fail-closed observations, no pathname-based authority as proof, PROC_THREAD_ATTRIBUTE_JOB_LIST at creation (no post-creation assignment fallback) — carrying over the real-Windows adversarial cases from my #287 comment (junction/symlink substitution, DACL readback verification, breakaway/kill-on-close).

I'll open the PR from my fork. Could you assign this to me?

@tony-sebastian commented on GitHub (Oct 5, 2026): I'd like to take this on, per the invitation in #287. Plan: implement the three primitives as a Node-API addon under the accepted ADR-0004 shape — typed fail-closed observations, no pathname-based authority as proof, `PROC_THREAD_ATTRIBUTE_JOB_LIST` at creation (no post-creation assignment fallback) — carrying over the real-Windows adversarial cases from my #287 comment (junction/symlink substitution, DACL readback verification, breakaway/kill-on-close). I'll open the PR from my fork. Could you assign this to me?

bsakaguchi referenced this issue

2026-10-16 21:12:11 +00:00

[PR #235] [MERGED] fix: address setup, upgrade, and process test regressions #1885

bsakaguchi added

enhancement

and removed

enhancement

labels

2026-10-31 00:28:47 +00:00