From 0ff0766416a8c3c3491395c7bc3c7b24880737d1 Mon Sep 17 00:00:00 2001 From: halfaipg Date: Wed, 24 Jun 2026 21:07:01 -0400 Subject: [PATCH 1/2] chore: add OSS governance (Apache-2.0 license, security policy, secret-scan CI) --- .github/workflows/secret-scan.yml | 36 ++++++ .gitleaks.toml | 59 +++++++++ LICENSE | 202 ++++++++++++++++++++++++++++++ SECURITY.md | 21 ++++ 4 files changed, 318 insertions(+) create mode 100644 .github/workflows/secret-scan.yml create mode 100644 .gitleaks.toml create mode 100644 LICENSE create mode 100644 SECURITY.md diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml new file mode 100644 index 0000000..a72171c --- /dev/null +++ b/.github/workflows/secret-scan.yml @@ -0,0 +1,36 @@ +# Reusable secret-scan backstop. Drop into each PUBLIC repo as +# .github/workflows/secret-scan.yml. This is the seatbelt, NOT the gate — the +# allowlist export is the gate. Blocks PRs/pushes that introduce secrets, infra +# IPs, local dev paths, or audit reports. +name: secret-scan +on: + push: + pull_request: + +jobs: + gitleaks: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + with: + fetch-depth: 0 # full history, not just HEAD + - name: gitleaks (with AIPG rules) + uses: gitleaks/gitleaks-action@v2 + env: + GITLEAKS_CONFIG: .gitleaks.toml # commit the AIPG config into the repo + + infra-strings: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v4 + - name: block infra / local-path leaks + run: | + set -e + patt='172\.(30|31)\.[0-9]+\.[0-9]+|/Users/[a-z0-9._-]+/|aipgcoregen|BEGIN (RSA |EC |OPENSSH |)PRIVATE KEY' + if git grep -nIE "$patt" -- . ':(exclude).gitleaks.toml' ':(exclude)**/secret-scan.yml'; then + echo "::error::infra/secret string found above — scrub before merge"; exit 1 + fi + if git ls-files | grep -iE 'security_audit|audit_report'; then + echo "::error::audit report file tracked — must not ship"; exit 1 + fi + echo "infra-string scan clean" diff --git a/.gitleaks.toml b/.gitleaks.toml new file mode 100644 index 0000000..b9210c7 --- /dev/null +++ b/.gitleaks.toml @@ -0,0 +1,59 @@ +# gitleaks config for AIPG OSS release scanning. +# Extends gitleaks' default ruleset (API keys, AWS, private keys, JWTs, ...) with +# AIPG-specific leaks that the defaults DON'T catch: internal infra, local dev +# paths, R2 buckets, on-chain addresses. Use with: +# gitleaks detect --source --config .gitleaks.toml --redact + +[extend] +useDefault = true + +[[rules]] +id = "aipg-internal-ip" +description = "Internal datacenter IP (Proxmox/LXC range)" +regex = '''\b(172\.(3[01])|10\.)\.\d{1,3}\.\d{1,3}\b''' +tags = ["aipg", "infra"] + +[[rules]] +id = "aipg-local-dev-path" +description = "Local developer absolute path (leaks username / machine layout)" +regex = '''/Users/[a-z0-9._-]+/''' +tags = ["aipg", "infra"] + +[[rules]] +id = "aipg-r2-bucket" +description = "Cloudflare R2 / internal bucket names" +regex = '''\b(aipgcoregen|aipg-transient|aipgcore[a-z0-9-]*)\b''' +tags = ["aipg", "infra"] + +[[rules]] +id = "aipg-eth-private-key" +description = "EVM private key (64 hex, optionally 0x)" +regex = '''\b(0x)?[a-fA-F0-9]{64}\b''' +tags = ["aipg", "wallet"] +# Hex-64 is also sha256 hashes / git oids → high false positives. Treated as a +# REVIEW signal, not an auto-block; the human triages contracts/worker output. +[rules.allowlist] +regexes = ['''[a-f0-9]{64}'''] # lowercase-only 64hex (hashes) are usually benign +paths = ['''(?i)(test|fixture|mock|\.lock|package-lock|yarn\.lock|poetry\.lock)'''] + +[[rules]] +id = "aipg-mnemonic" +description = "BIP-39 mnemonic / seed phrase markers" +regex = '''(?i)(mnemonic|seed[\s_-]?phrase)\s*[:=]\s*["']?(\w+\s+){11,}''' +tags = ["aipg", "wallet"] + +# Global allowlist: example/template/sample env + docs placeholders never block. +[allowlist] +description = "Non-secret placeholders, lockfiles, and the scanner's own config" +paths = [ + '''(?i)\.env\.(example|template|sample)$''', + '''(?i)(^|/)(examples?|samples?)/''', + '''(?i)\.(lock)$''', + '''(?i)(package-lock\.json|yarn\.lock|pnpm-lock\.yaml|poetry\.lock|Cargo\.lock)$''', + # The scanner's own files contain the patterns by definition — never self-flag. + '''(?i)\.gitleaks\.toml$''', + '''(?i)secret-scan\.ya?ml$''', +] +regexes = [ + '''(?i)(your[-_]?api[-_]?key|example|placeholder|changeme|xxxx+|<[a-z_]+>)''', +] diff --git a/LICENSE b/LICENSE new file mode 100644 index 0000000..d645695 --- /dev/null +++ b/LICENSE @@ -0,0 +1,202 @@ + + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright [yyyy] [name of copyright owner] + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..0c445e5 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Reporting a vulnerability + +Email **security@aipowergrid.io** (or open a private GitHub security advisory). +Please do **not** open public issues for security reports. + +- We acknowledge within 72 hours and aim to triage within 7 days. +- Coordinated disclosure: give us a reasonable window to ship a fix before public + disclosure. We credit reporters who follow this process. + +## Scope + +In scope: this repository's code, smart contracts, and protocol handling. +Out of scope: third-party dependencies (report upstream), social engineering, +volumetric DoS. + +## Smart contracts + +On-chain code on Base is verified and public. Findings affecting funds, access +control, or settlement are highest priority. From 151c6952d6427e0a285ca470bc80acaf67c7c2f3 Mon Sep 17 00:00:00 2001 From: halfaipg Date: Wed, 24 Jun 2026 21:21:12 -0400 Subject: [PATCH 2/2] ci: scrub local path in AGENTS.md; run gitleaks via binary (org-license-free) --- .github/workflows/secret-scan.yml | 22 ++++++++++++---------- AGENTS.md | 2 +- 2 files changed, 13 insertions(+), 11 deletions(-) diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml index a72171c..e652404 100644 --- a/.github/workflows/secret-scan.yml +++ b/.github/workflows/secret-scan.yml @@ -1,7 +1,7 @@ -# Reusable secret-scan backstop. Drop into each PUBLIC repo as -# .github/workflows/secret-scan.yml. This is the seatbelt, NOT the gate — the -# allowlist export is the gate. Blocks PRs/pushes that introduce secrets, infra -# IPs, local dev paths, or audit reports. +# Secret-scan backstop. The allowlist export is the gate; this is the seatbelt. +# Uses the gitleaks BINARY (Apache-2.0, free) — NOT gitleaks-action, which +# requires a paid GITLEAKS_LICENSE for organization repos. Scans the current tree +# (--no-git) so it blocks NEW secrets/infra strings without re-flagging old history. name: secret-scan on: push: @@ -12,12 +12,14 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - with: - fetch-depth: 0 # full history, not just HEAD - - name: gitleaks (with AIPG rules) - uses: gitleaks/gitleaks-action@v2 - env: - GITLEAKS_CONFIG: .gitleaks.toml # commit the AIPG config into the repo + - name: install gitleaks + run: | + curl -sSL -o /tmp/gl.tgz \ + https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_linux_x64.tar.gz + tar -xzf /tmp/gl.tgz -C /tmp gitleaks + sudo install /tmp/gitleaks /usr/local/bin/gitleaks + - name: scan working tree + run: gitleaks detect --source . --no-git --config .gitleaks.toml --redact --verbose infra-strings: runs-on: ubuntu-latest diff --git a/AGENTS.md b/AGENTS.md index 351fae5..460f83e 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -51,7 +51,7 @@ surface does not cover. Published to npm as `grid-ai`. ## Local Contracts -- **Inherit org engineering standards:** `/Users/j/fix-axios-vuln/aipg-documentation/engineering-standards/` +- **Inherit org engineering standards:** `aipg-documentation/engineering-standards/` (core + git + the matching language file). - **Thin over `openai`:** the OpenAI-compatible surface (`.chat`, `.images`, `.models`, …) comes from extending `OpenAI`. Do not reimplement it. Only Grid-specific additions belong