Overview

This repository contains the standalone networking library responsible for the dark ingress, transport encryption, and peer-to-peer routing of the orchestrator mesh. It operates entirely independent of the configuration management logic.

Core Responsibilities

• Transport Management: Handles the QUIC (over UDP) transport layer, multiplexing streams for varied RPC types.
• Identity & Authentication: Implements the Long-Term Public Key (LTPK) trust model, completely bypassing X.509/CAs. Handles dropping unauthenticated packets (Dark Ingress) using Noise Protocol preambles.
• Post-Quantum Cryptography: Implements the Hybrid PQ-X3DH handshake (ML-KEM/Kyber + X25519) and the Double Ratchet algorithms (Pairwise Olm for 1-to-1, Group Megolm for 1-to-many broadcasts).
• Topology & Routing: Manages the tinc-style meta-protocol for graph discovery, static routing configuration, and the embedded reverse tunneling for NAT traversal.

Exported Interfaces / API

• DialPeer(LTPK, Address) / Listen(Port)
• SendPairwise(LTPK, ProtobufMessage): Triggers Olm ratchet and sends targeted payload.
• BroadcastGroup(Topic, ProtobufMessage): Triggers Megolm ratchet and gossips payload to connected edges.
• GetTopologyGraph(): Returns the current known sub-graph of reachable peers.

Suggested Tech Stack

• Language: Rust (ideal for crypto/memory safety) or Go (excellent QUIC libraries like quic-go).
• Libraries: Protobuf for serialization, vodozemac (or custom implementation) for Double Ratchet, hybrid post-quantum KEM libraries.