DICC CLUSTER: eyedbase-web :1700 | docs :1701
Account Authority: [email protected] (Port 5560) | 0% TrueNAS (TNSB-001)
Eyedbase Logo
EYEDBASE ENCLAVE
SOVEREIGN IDENTITY SUBSTRATE • FIDO2 PASSKEYS

Zero-Trust Identity Provider
& Cryptographic Enclave for the AI Stack

Hardware-bound WebAuthn passkeys, sub-150ms biometric verification, and centralized OIDC 2.0 federation across autonomous agent fleets. Zero shared secrets in transit.

Enclave State
Active (Live)
WebAuthn / FIDO2 Enclave
Assertion Latency SLA
0.142 ms
Sub-150ms Target Verified
Session Lease Boundary
300s TTL
Fail-Closed Eviction
Storage Compliance
0% TrueNAS
TNSB-001 Local NVMe Validated
FIDO2 / WEBAUTHN DEMONSTRATION

Interactive Cryptographic Enclave Ceremony

READY
1
Challenge Generation
32-byte cryptographic random nonce generated by Relying Party (eyedbase.com).
2
Biometric Prompt
Hardware user verification (Touch ID / YubiKey / Windows Hello) derives enclave signature.
3
COSE Asymmetric Sign
ECDSA P-256 (COSE -7) or Ed25519 (COSE -8) signs raw authenticator data client-side.
4
Token Minting
Cryptographic attestation validated in 0.142ms. Sovereign JWT issued with 300s fail-closed TTL.
🧪 FIDO2 ERROR INJECTION TESTING (EB-ENH-07):
// Cryptographically Attested Token Claims (Issued by Eyedbase Enclave)
{
  "iss": "https://eyedbase.com/realms/ai-stack",
  "sub": "usr_sec_enclave_7f901bca28",
  "aud": "eyedbase-ai-stack-2026-v1",
  "auth_time": 1790234720,
  "exp": 1790235020, /* Strict 300s fail-closed boundary */
  "amr": ["fido2", "hw_enclave", "user_verified"],
  "cose_alg": -7, /* ES256 NIST P-256 */
  "storage_compliance": "TNSB-001_NVME_CRUCIAL_3.64TB_00"
}
DEVELOPER INTEGRATION

Interactive SDK Code Generator

// TypeScript / React Setup
import { createAuthHook, setupWidgetAuth } from '@eyedbase/auth-client';

const auth = createAuthHook({
  issuer: 'https://eyedbase.com',
  realm: 'ai-stack',
  clientId: 'eyedbase-web-app'
});

const token = await auth.loginWithPasskey();
setupWidgetAuth(token);
PROD CONSOLE Eyedbase Sovereign Enclave
Database: LINDEBPSGPRD501 (172.16.31.181:5432) • 0% TrueNAS Storage (TNSB-001) • Mode: High-Availability Enclave
Active User Sessions
42 Active
Strict 300s Enclave Leases
M2M Service Principals
6 Authorized
Non-Wildcard Scopes Enforced
Enrolled Hardware Passkeys
128 Keys
COSE -7 / -8 / -257 Enclaves
Account Authority
[email protected]
Port 5560 Binding Verified
PHYSICAL NVMe STORAGE HEALTH (EB-ENH-12)
LINDEBPSGPRD501:5432
Latency: 0.082ms read / 0.114ms write
Datastore: 13.NVME_CRUCIAL_3.64TB_00
0% TRUENAS BAN COMPLIANCE (EB-ENH-13)
VERIFIED ENFORCED
0% TrueNAS / 0% QNAP detected
Protocols: TNSB-001 • TDB-001 Hard Gate
DUAL-WRITE CONFIG INVARIANT (EB-ENH-09)
DFG-001 SYNCHRONIZED
window.__SK_CONFIG__ • Verified
window.__WIDGET_CONFIG__ • Synced
📡 SOVEREIGN ENCLAVE HEALTH PROBE TELEMETRY (EB-ENH-20)
/health: 200 OK /health/ready: 200 OK /health/live: 200 OK
DEV CONSOLE Eyedbase Development Enclave
Database: LINDEBPSGDEV501 (172.16.31.180:5432) • Isolated Sandbox • Stage Test Telemetry

Development Sandbox Status

Development sessions operate on an isolated database socket to prevent cross-environment pollution with production. All token issuance in this environment is labeled stage-dev with mocked WebAuthn credentials for automated testing.

Eyedbase Architecture & Identity Foundation

Eyedbase serves as the authoritative Centralized Identity Provider and Zero-Trust Authentication Enclave for the SpreadKnowledge AI stack portfolio. It is designed to eliminate passwords, prevent credential harvesting, and provide deterministic machine-to-machine (M2M) authorization across autonomous agent swarms.

Core Architectural Commitments

1. Asymmetric Cryptography: Eyedbase strictly rejects passwords. Every human credential uses FIDO2 WebAuthn asymmetric public-key cryptography bound to hardware security enclaves.

2. Dual-Write Compatibility (DFG-001): During the enterprise transition from legacy architectures to the unified SPA shell, authentication helpers dual-write to both window.__WIDGET_CONFIG__ and window.__SK_CONFIG__.

3. Fail-Closed Session Leases: Downstream APIs enforce 300-second maximum token lifetimes. Revoked credentials fail closed immediately.

4. Zero TrueNAS Storage (TNSB-001): All database backings run on dedicated physical ESXi NVMe block storage (LINDEBPSGPRD501 (172.16.31.181:5432)). TrueNAS and QNAP appliances are 100% prohibited.

Live OIDC Discovery Endpoint Tester (EB-ENH-17)

GET https://eyedbase.com/.well-known/openid-configuration