icp-rbac-canister-kit
Production-grade Role-Based Access Control (RBAC) canister infrastructure and audit trail for the Internet Computer.
| Size | Folder | Inside |
|---|---|---|
| 537 B | examples/ | 1 example |
| 5.7 kB | src/ | 1 source file |
| 2.5 kB | tests/ | 1 test file |
| 7.5 kB | (root) | 7 docs · 3 config files |
| Size | Path |
|---|---|
| 25 B | .gitignore |
| 340 B | AGENT_EVAL.md |
| 337 B | ARCHITECTURE.md |
| 408 B | Cargo.toml |
| 985 B | LICENSE.md |
| 292 B | LIMITATIONS.md |
| 609 B | PREVIEW.md |
| 252 B | QUICKSTART.md |
| 929 B | README.md |
| 419 B | TEST_REPORT.md |
| 672 B | commercial-manifest.json |
| 537 B | examples/client_integration.js |
| 787 B | icp_rbac_canister.did · binary |
| 1.5 kB | release-manifest.json |
| 5.7 kB | src/lib.rs |
| 2.5 kB | tests/unit_tests.rs |
Already bought this?
View your purchasesREADME
ICP RBAC Canister Kit
A production-grade Role-Based Access Control (RBAC) canister infrastructure and FIFO audit trail kit for applications deployed on the Internet Computer (ICP).
Capabilities
- Hierarchical Role Model: Built-in
Admin,Operator,Auditor,Member, andGuesttiers with granular permission assignment. - Fail-Closed Security: All mutations strictly enforce caller permissions; unauthorized attempts are rejected and immutably recorded in the audit log.
- Emergency Circuit Breaker: Instant one-call freeze mechanism to halt non-administrative mutations during security incidents.
- FIFO Audit Trail: Capped in-memory audit log recording principal identities, actions, target principals, timestamps, and authorization outcomes.
- Candid Interface: Complete Candid
.didspecification for seamless cross-canister and frontend integration.
Quick Start
cargo test
Security scan report
Scanned by X402 Git, OSV (opens in a new tab) and Socket (opens in a new tab) — passed on all three. Findings from Socket are listed below.
- secrets
- none found
- X402 Git
- size limits
- within caps
- X402 Git
- known malware
- none in 2 packages
- OSV
- known vulnerabilities
- none in 2 packages
- OSV
- dependency behaviour
- 1 direct package declares install scripts, filesystem access, environment variables and more · 77 more in transitive packages · 2 packages flagged for review
- Socket
- instruction smuggling
- none found
- X402 Git
- what it can do
- nothing to declare
- X402 Git
What this can do
No tools, no hosts, no environment variables, nothing runs at install.
Findings (14)
- flagged for reviewblock-buffer 0.10.4 — block-buffer 0.10.4 (transitive) — flagged for review by Socket's classifier as a security risk
- MODERATEserde 1.0.229 — serde 1.0.229 (direct) — ships compiled native code
- MODERATEserde 1.0.229 — serde 1.0.229 (direct) — install scripts run when installed
- MODERATEblock-buffer 0.10.4 — block-buffer 0.10.4 (transitive) — has a known vulnerability GHSA-qwgh-2vcv-g2f7 GHSA-qwgh-2vcv-g2f7
- LOWserde 1.0.229 — serde 1.0.229 (direct) — reads environment variables
- LOWserde 1.0.229 — serde 1.0.229 (direct) — reads or writes files
- flagged for reviewnum-bigint 0.4.8 — num-bigint 0.4.8 (transitive) — flagged for review by Socket's classifier as anomalous
- LOWSocket SBOM Resolver — Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible
- MODERATEhasNativeCode — 17 transitive packages, e.g. anyhow@1.0.104, ar_archive_writer@0.5.3, binrw@0.15.2
- MODERATEinstallScripts — 16 transitive packages, e.g. anyhow@1.0.104, autocfg@1.5.1, binrw@0.15.2
- MODERATEshellAccess — 5 transitive packages, e.g. autocfg@1.5.1, object@0.39.1, syn@2.0.119
- MODERATEnetworkAccess — 3 transitive packages, e.g. arrayvec@0.5.2, object@0.39.1, quote@1.0.47
- LOWenvVars — 21 transitive packages, e.g. anyhow@1.0.104, ar_archive_writer@0.5.3, autocfg@1.5.1
- LOWfilesystemAccess — 11 transitive packages, e.g. ar_archive_writer@0.5.3, autocfg@1.5.1, cc@1.10.0
Releases 1
- v1.0.02026-09-16
feat: initial commercial release v1.0.0