Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 5 additions & 29 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -75,17 +75,17 @@ cargo build --workspace
cargo nextest run --workspace
```

### Running the Services
### Running Services

The easiest way to run all services locally is with the dev runner script:

```bash
./dev.sh
```

This starts the registry, verifier, and approval UI in a single terminal with colored log output. Press Ctrl+C to stop all services.
This starts the registry, verifier, and approval UI in a single terminal with colored log output.

To run services individually:
To run individually:

```bash
# Start the registry service
Expand Down Expand Up @@ -119,12 +119,8 @@ agentauth/
├── load-tests/ # k6 load test scripts
├── chaos/ # Chaos engineering experiments
├── deploy/
│ ├── helm/ # Kubernetes Helm charts
│ └── grafana/ # Grafana dashboards
└── docs/
├── threat-model.md # Security threat model
├── runbook.md # Operations runbook
└── capacity-planning.md # Sizing guidelines
├── helm/ # Kubernetes Helm charts
└── grafana/ # Grafana dashboards
```

## SDK Usage
Expand Down Expand Up @@ -172,33 +168,13 @@ headers = await client.authenticate_headers("service-provider-id", "POST", "/api

## Security

AgentAuth is designed with security as a primary concern:

- All signing keys stored in HSMs (AWS KMS, GCP Cloud KMS, Vault Transit)
- DPoP sender-constraint prevents token theft
- Nonce-based replay prevention
- Constant-time cryptographic comparisons
- Immutable audit log with hash chain integrity
- WebAuthn/Passkey for human approval signing

See [docs/threat-model.md](docs/threat-model.md) for the full threat model.

## Performance

Target performance characteristics:

| Operation | Throughput | p99 Latency |
|-----------|------------|-------------|
| Token verification (warm) | 10,000 req/s | < 5ms |
| Token verification (cold) | 1,000 req/s | < 20ms |
| Token issuance | 500 req/s | < 50ms |

## Documentation

- [Threat Model](docs/threat-model.md) - Security analysis and mitigations
- [Operations Runbook](docs/runbook.md) - Alert response procedures
- [Capacity Planning](docs/capacity-planning.md) - Sizing and scaling guidelines

## License

MIT License
283 changes: 0 additions & 283 deletions docs/capacity-planning.md

This file was deleted.

Loading
Loading