Svalinn

Post-Cloud Security Architecture: Edge gateway for verified container operations.

Svalinn is an experimental container gateway project. Its only runnable gateway in this checkout is a separate Deno/TypeScript MVP at tools/mvp/svalinn_gateway.ts; the AffineScript files under src/ and ui/src/ are incomplete migration artifacts, not a runnable port. The MVP is retained as a legacy exception while the replacement language/runtime decision and migration are unresolved. See measured status and the language/ecosystem audit.

Warning

The Deno/TypeScript MVP is not compliant with the repository’s stated language policy and is not production approval. It must not be extended as the long-term implementation. Removing it before a tested replacement exists would also remove the only runnable gateway.

Project Status

Component	Status	Description
Edge Gateway	MVP only (legacy Deno/TypeScript)	tools/mvp/svalinn_gateway.ts is the only runnable gateway recorded by STATUS.md; it is not the approved long-term implementation.
Vörðr Integration	Partial / unverified	The MVP has a Vörðr process integration; the AffineScript client is not compiled or verified.
Policy Engine	Partial / unverified	AffineScript sources exist, but are incomplete migration artifacts; do not treat this component as production-ready.
Authentication	Partial / unverified	AffineScript sources exist, but are incomplete migration artifacts; do not treat this component as production-ready.
svalinn-compose	Not implemented	An orchestration source stub exists; there is no verified, runnable CLI.

Architecture

                    ┌─────────────────────────────────────────────┐
                    │         VERIFIED CONTAINER ECOSYSTEM        │
                    └─────────────────────────────────────────────┘
                                          │
          ┌───────────────────────────────┼───────────────────────────────┐
          │                               │                               │
          ▼                               ▼                               ▼
  ┌───────────────┐            ┌─────────────────┐            ┌─────────────────┐
  │   SVALINN     │            │     VÖRÐR       │            │  CERRO TORRE    │
  │  Edge Shield  │───────────▶│   Container     │◀───────────│    Builder      │
  │ (ReScript/    │  delegates │    Engine       │  produces  │   (Ada/SPARK)   │
  │    Deno)      │            │  (Rust/Ada)     │            │                 │
  └───────┬───────┘            └────────┬────────┘            └─────────────────┘
          │                             │                               │
          │         ┌───────────────────┴───────────────────┐           │
          │         │                                       │           │
          ▼         ▼                                       ▼           ▼
  ┌───────────────────────────────────────────────────────────────────────────┐
  │                      VERIFIED-CONTAINER-SPEC                              │
  │                   (Protocol Specification)                                │
  │         Attestation Format │ Trust Model │ Verification Semantics         │
  └───────────────────────────────────────────────────────────────────────────┘

What Svalinn Does

• Edge Gateway — REST API for container operations (Hono/Deno)

• Request Validation — JSON Schema validation against verified-container-spec

• Delegation — Forwards verified requests to Vörðr via MCP/JSON-RPC

• Policy Enforcement — Configurable allow/deny rules per operation type

• Authentication — OAuth2/OIDC and JWT token validation

• Compose Orchestration — Multi-container deployment via svalinn-compose

What Svalinn Does NOT Do

• Container Runtime — That’s Vörðr

• Image Building — That’s Cerro Torre

• Formal Verification — That’s the Idris2/Elixir layers in Vörðr

Getting Started

Prerequisites

# Deno runtime (>= 2.0)
curl -fsSL https://deno.land/install.sh | sh

# Just command runner (optional but recommended)
cargo install just

Configuration

export SVALINN_PORT=8000           # Gateway port (default: 8000)
export SVALINN_HOST=0.0.0.0        # Bind address (default: 0.0.0.0)
export VORDR_ENDPOINT=http://localhost:8080  # Vörðr MCP endpoint
export SPEC_VERSION=v0.1.0         # Spec version for validation

Build and Run

# Development (hot reload)
just dev

# Production server
just serve

# Compile to binary
just build

# Run tests
just test

svalinn-compose

Compose-compatible orchestration with security extensions.

# Start services defined in svalinn-compose.yaml
svalinn-compose up

# Start in detached mode
svalinn-compose up -d

# Stop and remove containers
svalinn-compose down

# List running services
svalinn-compose ps

# View logs (follow mode)
svalinn-compose logs -f web

# Scale a service
svalinn-compose scale web=3

# Validate compose file
svalinn-compose config

Compose File Format

version: "1.0"
services:
  web:
    image: nginx:alpine
    ports:
      - "8080:80"
    x-svalinn:
      policy: strict
      verify: true

x-svalinn:
  policy: standard
  attestations:
    require-sbom: true
    require-signature: true

REST API

Endpoint	Method	Description
/healthz	GET	Health check with Vörðr connection status
/v1/containers	GET	List all containers
/v1/containers/:id	GET	Get container info
/v1/run	POST	Run a container (validated against schema)
/v1/verify	POST	Verify image attestations
/v1/containers/:id/stop	POST	Stop a container
/v1/containers/:id	DELETE	Remove a container
/v1/images	GET	List images

Project Structure

svalinn/
├── src/                    # Incomplete AffineScript migration artifacts
├── ui/src/                 # Incomplete AffineScript migration artifacts
├── tools/mvp/              # Legacy runnable Deno/TypeScript MVP gateway
├── tools/mvp/svalinn-gate/ # Rust MVP policy gate
├── tests/                  # MVP, schema, and spec-mirror tests
├── spec/                   # JSON Schema definitions
├── Justfile                # Historical and current task recipes (audit before use)
└── docs/language-and-ecosystem-audit.adoc

Integration with Svalinn Ecosystem

Component	Role	Link
Vörðr	Container engine with formal verification	vordr
Cerro Torre	Provenance-verified image packaging	cerro-torre
verified-container-spec	Protocol specification	verified-container-spec

Development

Justfile Commands

just                    # List all commands
just dev                # Development server (hot reload)
just serve              # Production server
just build              # Compile to binary (dist/svalinn)
just test               # Run test suite
just check              # Type check
just lint               # Lint code
just fmt                # Format code
just precommit          # fmt + lint + check + test

Contributing

• Language Policy: No new TypeScript or Deno work. The existing Deno/TypeScript MVP is legacy migration debt, not an approved production stack; see .claude/CLAUDE.md and docs/language-and-ecosystem-audit.adoc.

• Security: HTTPS in production, no hardcoded secrets

• Licensing: PMPL-1.0 OR MPL-2.0, SPDX headers required

License

This project is licensed under the Mozilla Public License, v. 2.0. See the LICENSE file for details.

SPDX-License-Identifier: CC-BY-SA-4.0

References

• Vörðr Container Engine

• Verified Container Specification

• Cerro Torre Builder

• ReScript

• Deno

• Model Context Protocol