rock/poimen-memory
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
163 Commits 8 Branches 0 Tags
bf0405f47df08b54333fc3b653b2668d2a9f45af
Commit Graph
3 Commits
Author SHA1 Message Date
rock 2850907167 docs: merge ARCHITECTURE_REFACTORING into memory-wiki-graph-rag-optimization.md 
Integrated SOLID + DRY optimizations as new section:
- Scoring pipeline (DocumentScorer trait, ScoringPipeline orchestrator)
- Policy provider (PolicyProvider trait, pluggable Vault/Postgres/Redis)
- RBAC decision engine (AccessChecker composition, short-circuit eval)
- Test fixtures (OidcClaimsBuilder, AccessPolicyBuilder)

Implementation priority:
1. ScoringPipeline (Phase 3)
2. PolicyProvider trait (Phase 7)
3. AccessChecker composition (Phase 7)
4. Test fixtures (All phases)

Unified doc now has: architecture + concrete implementation + SOLID refactoring.
 2026-08-30 20:36:49 -07:00
rock fa965db865 docs: add concrete implementation details to RAG/RBAC design 
Each phase now includes:
- Exact code locations (which crates/files)
- Function signatures and method stubs
- Unit tests with expected behavior
- Integration tests for end-to-end verification
- Homelab vault structure (test data)
- Performance benchmarks and targets
- Verification checklists

Phases 1-7 now actionable:
1. Wiki-link graph indexing (parser + repo + SQL schema)
2. Multi-scope TF-IDF (global + project-local + chunk metadata)
3. Hybrid retrieval (wiki-scoped router + RRF fusion)
4. LLM call optimization (chunk selector with budget)
5. Chunk metadata extraction (heading + key terms + category)
6. Cache alignment (locality-aware wiki traversal)
7. OIDC + RBAC (JWT parsing + policy engine + audit logging)

End-to-end test scenario provided.
 2026-08-30 20:32:12 -07:00
rock 4d2dd6408b docs: add memory-wiki-graph-rag-optimization.md — complete RAG + RBAC design 
7 phases:
1. Wiki-link graph indexing (project scopes, skill links)
2. Multi-scope TF-IDF (global + project-local + chunk-level)
3. Hybrid retrieval (wiki-nav + TF-IDF + semantic search + RRF fusion)
4. LLM call optimization (budget-aware chunk selection)
5. Chunk-level metadata (category boost, key terms)
6. Cache alignment (KV cache hit ratio via wiki-link ordering)
7. OIDC + RBAC (JWT from Authentik, policy files in Vault)

JWT flow:
- Token validated against Authentik JWKS
- OIDC claims extracted (sub, groups, roles, permissions)
- Project-level RBAC check (403 if denied)
- Skill-level RBAC filtering (denied skills silently removed)
- All decisions logged to rbac_audit_log

3 access levels: private (owner only) | group (explicit list) | public
Policies stored in vault as YAML, any service can enforce.
 2026-08-30 20:24:42 -07:00