mrkairolee-crypto/mike
A security-first take on Mike that treats every sensitive action as something to log, scope, and expire.
This fork, from mrkairolee-crypto, is shaping Mike into a tool that takes confidentiality seriously. The work so far circles one idea: in a legal setting, who did what - and who can still get at a document - matters as much as the document itself.
Two pieces are in place. There's an audit trail that records sensitive actions while keeping the actual secrets out of the log, and a download system that swaps permanent, reusable links for ones that are short-lived and tied to a single purpose. Both point the same way: less standing access, more accountability.
It's a small, deliberate fork rather than a broad rebuild. If confidentiality and access control are what you care about, mrkairolee-crypto's direction is worth a look on GitHub.
What's in it
- Confidentiality-grade audit trail Sensitive actions get logged for accountability, with the logging built so the secrets themselves never land in the record. Includes an owner-only view of the events.
- Expiring download tokens Download links that used to live forever and work for anyone are now short-lived and scoped to a single purpose - so a leaked link stops being a standing risk.
Direction
securitycompliance
Activity
Threads of work (detailed view)
mrkairolee-crypto builds Mike a confidentiality-grade audit trail
Every sensitive action in this fork now gets logged - and the log is engineered so the secrets never end up in it.
mrkairolee-crypto puts a clock on document download links
Permanent download links that anyone could reuse forever are now short-lived and single-purpose.