2 Commits

Include renames

Author	SHA1	Message	Date
rock	d974b2e180	docs: add concrete implementation details to RAG/RBAC design ... Each phase now includes: - Exact code locations (which crates/files) - Function signatures and method stubs - Unit tests with expected behavior - Integration tests for end-to-end verification - Homelab vault structure (test data) - Performance benchmarks and targets - Verification checklists Phases 1-7 now actionable: 1. Wiki-link graph indexing (parser + repo + SQL schema) 2. Multi-scope TF-IDF (global + project-local + chunk metadata) 3. Hybrid retrieval (wiki-scoped router + RRF fusion) 4. LLM call optimization (chunk selector with budget) 5. Chunk metadata extraction (heading + key terms + category) 6. Cache alignment (locality-aware wiki traversal) 7. OIDC + RBAC (JWT parsing + policy engine + audit logging) End-to-end test scenario provided.	2026-08-30 20:32:12 -07:00
rock	f5dd772649	docs: add memory-wiki-graph-rag-optimization.md — complete RAG + RBAC design ... 7 phases: 1. Wiki-link graph indexing (project scopes, skill links) 2. Multi-scope TF-IDF (global + project-local + chunk-level) 3. Hybrid retrieval (wiki-nav + TF-IDF + semantic search + RRF fusion) 4. LLM call optimization (budget-aware chunk selection) 5. Chunk-level metadata (category boost, key terms) 6. Cache alignment (KV cache hit ratio via wiki-link ordering) 7. OIDC + RBAC (JWT from Authentik, policy files in Vault) JWT flow: - Token validated against Authentik JWKS - OIDC claims extracted (sub, groups, roles, permissions) - Project-level RBAC check (403 if denied) - Skill-level RBAC filtering (denied skills silently removed) - All decisions logged to rbac_audit_log 3 access levels: private (owner only) | group (explicit list) | public Policies stored in vault as YAML, any service can enforce.	2026-08-30 20:24:42 -07:00