eran.codes

Rust workspace behind https://eran.codes.

The repo is organized around one public thesis:

• statum is the flagship crate.
• /open-source compares the published crates.
• /lab is the live application proof.
• /work/sensitive-sync is the single written case study.
• /work is a short archive for older shipped systems.

What is here

The workspace keeps the usual boundary split:

• crates/domain: domain types and invariants
• crates/app: workflows and policy
• crates/infra: Postgres, repositories, hashing, config
• crates/http: routes, handlers, SSE, Maud views, live proof surface
• crates/utils: developer tooling

If you want the short version, start with:

1. /
2. /lab
3. /work/sensitive-sync
4. /open-source

Docs

• docs/README.md
• Sensitive Sync Architecture
• Auth + Sessions
• Portfolio Demo Notes

Run It

Required env:

• HOST
• PORT
• DATABASE_URL
• SESSION_SECRET
• DATA_ENCRYPTION_KEYS_JSON
• ACTIVE_DATA_KEY_ID

Optional env:

• DISABLED_DATA_KEY_IDS
• SENSITIVE_PROVIDER_MODE
• SENSITIVE_PROVIDER_BASE_URL
• SENSITIVE_SANDBOX_CLIENT_ID
• SENSITIVE_SANDBOX_CLIENT_SECRET

Local boot:

docker-compose up -d
cargo run --bin with_db -- sqlx migrate run --source crates/infra/migrations
cargo run

Validation

cargo test --workspace --lib --tests
bash scripts/check_portfolio_browser_smoke.sh
bash scripts/check_docker_runtime_smoke.sh