Implement secure user-side acquisition and manual import #74

Merged

JackFrostbyte merged 1 commit from feature/issue-46-safe-user-acquisition into develop

2026-09-28 02:44:18 -04:00

JackFrostbyte commented

2026-09-28 02:40:23 -04:00

Owner

Summary

Closes #46.

Implements Arkive's trusted, single-source acquisition foundation for user-local external content.

Implementation

Reviewed acquisition catalogue with runtime eligibility validation.
Secure manual imports and official HTTPS downloads.
Host allowlisting, DNS rebinding protection, redirect validation and download limits.
File integrity and media-type verification.
Secure quarantine and atomic promotion.
Local acquisition provenance and validated reuse.
Acquisition CLI supporting inspection, dry runs, imports and downloads.
Historical recipe-snapshot validation correction.
Security documentation, threat model and adversarial regression tests.

Validation

616 complete-suite tests passed.
288 focused acquisition tests passed.
288 acquisition tests passed with external networking blocked.
15 reproducibility tests passed.
Canonical validator, Ruff, dependency and Git integrity checks passed.
89% combined acquisition-module coverage.

Scope and limitations

The production acquisition catalogue intentionally remains empty pending approval of real sources.

Batch acquisition, incremental processing, indexing and maintainer health monitoring remain separate issues.

Standalone deployment integration and complete overlay-contamination validation remain assigned to #50. Real-source integration will be exercised during pilot #73.

## Summary Closes #46. Implements Arkive's trusted, single-source acquisition foundation for user-local external content. ### Implementation - Reviewed acquisition catalogue with runtime eligibility validation. - Secure manual imports and official HTTPS downloads. - Host allowlisting, DNS rebinding protection, redirect validation and download limits. - File integrity and media-type verification. - Secure quarantine and atomic promotion. - Local acquisition provenance and validated reuse. - Acquisition CLI supporting inspection, dry runs, imports and downloads. - Historical recipe-snapshot validation correction. - Security documentation, threat model and adversarial regression tests. ### Validation - 616 complete-suite tests passed. - 288 focused acquisition tests passed. - 288 acquisition tests passed with external networking blocked. - 15 reproducibility tests passed. - Canonical validator, Ruff, dependency and Git integrity checks passed. - 89% combined acquisition-module coverage. ### Scope and limitations The production acquisition catalogue intentionally remains empty pending approval of real sources. Batch acquisition, incremental processing, indexing and maintainer health monitoring remain separate issues. Standalone deployment integration and complete overlay-contamination validation remain assigned to #50. Real-source integration will be exercised during pilot #73.

JackFrostbyte added 1 commit

2026-09-28 02:40:23 -04:00