{"owner":"genesiscode2026","slug":"icp-rbac-canister-kit","channel":"genesiscode2026/icp-rbac-canister-kit","version":"1.0.0","artifact_sha256":"0911219a6a825cf081646dddcd285408b380cd48edd16cb976748adcc6bbd3f2","published_at":"2026-09-16T21:26:55.521Z","price_micro":"149000000","update_price_micro":"39000000","resource_endpoint":"https://x402git.com/api/r/genesiscode2026/icp-rbac-canister-kit","version_url":"https://x402git.com/api/v/genesiscode2026/icp-rbac-canister-kit","computed":{"artifact_class":"Pack","component_inventory":[{"kind":"source","count":1},{"kind":"tests","count":2},{"kind":"examples","count":1},{"kind":"docs","count":7},{"kind":"config","count":3},{"kind":"assets","count":1},{"kind":"other","count":1}],"file_count":16,"dir_depth":1,"bytes_text":15394,"bytes_binary":787,"languages":{"Rust":8128},"tree":[{"path":".gitignore","size":25,"binary":false},{"path":"AGENT_EVAL.md","size":340,"binary":false},{"path":"ARCHITECTURE.md","size":337,"binary":false},{"path":"Cargo.toml","size":408,"binary":false},{"path":"LICENSE.md","size":985,"binary":false},{"path":"LIMITATIONS.md","size":292,"binary":false},{"path":"PREVIEW.md","size":609,"binary":false},{"path":"QUICKSTART.md","size":252,"binary":false},{"path":"README.md","size":929,"binary":false},{"path":"TEST_REPORT.md","size":419,"binary":false},{"path":"commercial-manifest.json","size":672,"binary":false},{"path":"examples/client_integration.js","size":537,"binary":false},{"path":"icp_rbac_canister.did","size":787,"binary":true},{"path":"release-manifest.json","size":1461,"binary":false},{"path":"src/lib.rs","size":5663,"binary":false},{"path":"tests/unit_tests.rs","size":2465,"binary":false}],"readme_html":"<h2>ICP RBAC Canister Kit</h2>\n<p>A production-grade Role-Based Access Control (RBAC) canister infrastructure and FIFO audit trail kit for applications deployed on the Internet Computer (ICP).</p>\n<h3>Capabilities</h3>\n<ul><li><strong>Hierarchical Role Model</strong>: Built-in <code>Admin</code>, <code>Operator</code>, <code>Auditor</code>, <code>Member</code>, and <code>Guest</code> tiers with granular permission assignment.</li><li><strong>Fail-Closed Security</strong>: All mutations strictly enforce caller permissions; unauthorized attempts are rejected and immutably recorded in the audit log.</li><li><strong>Emergency Circuit Breaker</strong>: Instant one-call freeze mechanism to halt non-administrative mutations during security incidents.</li><li><strong>FIFO Audit Trail</strong>: Capped in-memory audit log recording principal identities, actions, target principals, timestamps, and authorization outcomes.</li><li><strong>Candid Interface</strong>: Complete Candid <code>.did</code> specification for seamless cross-canister and frontend integration.</li></ul>\n<h3>Quick Start</h3>\n<pre><code class=\"language-bash\">cargo test\n</code></pre>","dependencies":[],"licence":{"verdict":"manual"},"scan":{"verdict":"pass","scanner_version":"2026.09.1","at":"2026-09-16T21:26:58.458Z","checks":[{"id":"secrets","tool":"x402git/secrets","tool_version":"2026.09.1","status":"pass","at":"2026-09-16T21:26:58.458Z","findings":0},{"id":"limits","tool":"x402git/limits","tool_version":"2026.09.1","status":"pass","at":"2026-09-16T21:26:58.458Z","findings":0},{"id":"known_vulns","tool":"osv.dev","tool_version":"2026-11-01","status":"pass","at":"2026-11-01T04:00:19.835Z","findings":0,"packages":2},{"id":"known_malware","tool":"osv.dev/MAL","tool_version":"2026-11-01","status":"pass","at":"2026-11-01T04:00:19.835Z","findings":0,"packages":2},{"id":"dep_behaviour","tool":"socket.dev","tool_version":"2026-10-29","status":"findings","at":"2026-10-29T04:00:29.015Z","findings":81,"packages":56},{"id":"capabilities","tool":"x402git/caps","tool_version":"2026.09.1","status":"pass","at":"2026-09-16T21:26:58.458Z","findings":0},{"id":"injection","tool":"x402git/inject","tool_version":"2026.09.1","status":"pass","at":"2026-09-16T21:26:58.458Z","findings":0}],"findings":[{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"serde 1.0.229 (direct) — reads environment variables","package":{"ecosystem":"cargo","name":"serde","version":"1.0.229","direct":true,"dev":false},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"serde 1.0.229 (direct) — reads or writes files","package":{"ecosystem":"cargo","name":"serde","version":"1.0.229","direct":true,"dev":false},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"hasNativeCode","severity":"MODERATE","description":"serde 1.0.229 (direct) — ships compiled native code","package":{"ecosystem":"cargo","name":"serde","version":"1.0.229","direct":true,"dev":false},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"installScripts","severity":"MODERATE","description":"serde 1.0.229 (direct) — install scripts run when installed","package":{"ecosystem":"cargo","name":"serde","version":"1.0.229","direct":true,"dev":false},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptSecurity","severity":"MODERATE","description":"block-buffer 0.10.4 (transitive) — flagged for review by Socket's classifier as a security risk","package":{"ecosystem":"cargo","name":"block-buffer","version":"0.10.4","direct":false,"dev":false},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"mediumCVE","severity":"MODERATE","description":"block-buffer 0.10.4 (transitive) — has a known vulnerability GHSA-qwgh-2vcv-g2f7","package":{"ecosystem":"cargo","name":"block-buffer","version":"0.10.4","direct":false,"dev":false},"advisory_ids":["GHSA-qwgh-2vcv-g2f7"],"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"review","rule_id":"gptAnomaly","severity":"LOW","description":"num-bigint 0.4.8 (transitive) — flagged for review by Socket's classifier as anomalous","package":{"ecosystem":"cargo","name":"num-bigint","version":"0.4.8","direct":false,"dev":false},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"missingLockfile","severity":"LOW","description":"Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible","package":{"ecosystem":"generic","name":"Socket SBOM Resolver","direct":false,"dev":false},"source":"socket.dev"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"hasNativeCode","severity":"MODERATE","description":"hasNativeCode in 17 transitive packages","source":"socket.dev","aggregate":{"packages":17,"examples":["anyhow@1.0.104","ar_archive_writer@0.5.3","binrw@0.15.2"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"installScripts","severity":"MODERATE","description":"installScripts in 16 transitive packages","source":"socket.dev","aggregate":{"packages":16,"examples":["anyhow@1.0.104","autocfg@1.5.1","binrw@0.15.2"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"shellAccess","severity":"MODERATE","description":"shellAccess in 5 transitive packages","source":"socket.dev","aggregate":{"packages":5,"examples":["autocfg@1.5.1","object@0.39.1","syn@2.0.119"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"networkAccess","severity":"MODERATE","description":"networkAccess in 3 transitive packages","source":"socket.dev","aggregate":{"packages":3,"examples":["arrayvec@0.5.2","object@0.39.1","quote@1.0.47"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"envVars","severity":"LOW","description":"envVars in 21 transitive packages","source":"socket.dev","aggregate":{"packages":21,"examples":["anyhow@1.0.104","ar_archive_writer@0.5.3","autocfg@1.5.1"]}},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"filesystemAccess","severity":"LOW","description":"filesystemAccess in 11 transitive packages","source":"socket.dev","aggregate":{"packages":11,"examples":["ar_archive_writer@0.5.3","autocfg@1.5.1","cc@1.10.0"]}}],"capabilities":{"tools":[],"runs":[],"hosts":[],"env":[],"install_runs":false,"summary":"No tools, no hosts, no environment variables, nothing runs at install."},"counts":{"blocking":0,"disclosed":79,"review":2},"advisories_refreshed_at":"2026-11-01T04:00:19.835Z"},"originality":{"blob_overlap_ratio":0.067,"blobs_seen_elsewhere":1,"blobs_total":15,"nearest_listing":"genesiscode2026/point-in-time-quant-validator","derivative_of":null},"engineering":{"unique_5gram_ratio":0.456,"type_token_ratio":0.561,"effective_code_lines":92,"effective_doc_words":367,"code_files":3,"test_files":2,"padding_suspected":true,"class_note":"Capped at Pack: unique 5-gram ratio 0.456 is below the 0.6 guard."},"cadence":{"releases":0,"median_days_between_releases":null,"on_time_fraction":null,"days_since_last":null,"score":null,"finished":false},"inventory_sentence":"1 source file · 2 test files · 1 example · 7 docs","extensions":{"js":1,"md":8,"rs":2,"did":1,"json":2,"toml":1,"(none)":1},"lines_of_code":201,"warnings":["sbom_unavailable"],"repo_meta":{"repo_id":1373002832,"name":"icp-rbac-canister-kit","full_name":"genesiscode2026/icp-rbac-canister-kit","description":"Production-grade Role-Based Access Control (RBAC) canister infrastructure and audit trail for the Internet Computer.","homepage":null,"topics":[],"language":"Rust","default_branch":"main","size_kb":8,"created_at":"2026-09-16T12:28:52Z","pushed_at":"2026-09-16T13:30:36Z","licence_spdx":null,"open_issues":null,"stars":null,"forks":null,"watchers":null,"archived":false,"private":true,"html_url":null},"owner":{"login":"genesiscode2026","name":null,"avatar_url":"https://avatars.githubusercontent.com/u/329895054?v=4","bio":null,"blog":null,"company":null,"location":null,"twitter_username":null,"followers":null,"public_repos":1,"created_at":"2026-09-16T08:01:39Z","html_url":"https://github.com/genesiscode2026"},"computed_at":"2026-09-16T21:27:14.637Z","analyzer_version":"0.1.0"},"self_reported":{"description":"Production-grade Role-Based Access Control (RBAC) canister infrastructure and audit trail for the Internet Computer.","trigger_hint":"When requiring verified ICP Infrastructure functionality in autonomous workflows"}}