Secure Software Management Hub (Kościuszkon 2026 - Theme #1)

🛡️ Project Overview

This project is an Enterprise Security Management Hub designed for desktop application ecosystems. It acts as a centralized command center that orchestrates the Secure Deployment, Integrity Verification, and Lifecycle Management of multiple external applications (e.g., Security Scanners, Engine Monitors).

By adopting a Zero-Trust Architecture, the Hub ensures that no managed software is updated or executed without valid cryptographic proof from the authorized developer.

---

✨ Key Features

• Multi-App Orchestration: Manage and track multiple applications simultaneously with independent versioning and workspaces.
• Zero-Trust Security: Every update is verified using Ed25519 Detached Signatures before the manifest is even parsed.
• Delta Patching (bsdiff4): Minimizes bandwidth usage by only downloading the binary differences between versions.
• Post-Patch Integrity: Automated SHA-256 validation ensures the final reconstructed binary is bit-perfect and untampered.
• Atomic Installation: Safe file-swapping and automated restart flow for all managed applications.
• Replay & Downgrade Protection: Integrated TTL (Time-To-Live) and Version-Strict comparisons.
• Modern Security Dashboard: A dark-mode GUI providing real-time visual feedback and security animations.

---

🏗️ Architecture

The system consists of three independent layers:

1. Developer CLI (Publisher): Signs releases and generates binary delta patches for the entire ecosystem.
2. Update Server (FastAPI): A passive host for signed manifests and binary assets.
3. Management Hub (The Dashboard): The "local sentinel" that monitors, verifies, and performs the updates for all managed tools.

---

🚀 How to Run & Test

1. Environment Setup

# Install server dependencies
pip install -r server/requirements.txt
# Install client/hub dependencies
pip install -r client/requirements.txt

2. Prepare the Ecosystem

# A. Generate Security Keys (Private stays on server, Public goes to client)
python server/generate_keys.py

# B. Publish Updates for all Apps (Scanner, Monitor, etc.)
python server/publisher.py

# C. Start the Update Host
python -m uvicorn server.main:app --reload --port 8000

3. Launch the Hub

python client/app.py

Click "SECURE UPDATE" on any managed app to see the visual security pipeline in action.

---

🧪 Verification

Automated Testing

# Run security and logic unit tests
python -m pytest tests/test_system.py

# Run full end-to-end integration test
python tests/test_integration.py

Manual Security Test (Tampering)

1. Open server/static/security_scanner/manifest.json.
2. Modify a single character in the version number.
3. Attempt an update in the Hub.
4. Result: The Hub will detect the signature breach, flash RED, and block the installation.

---

📄 Documentation

For a deep dive into the threat model and cryptographic design, see SECURITY.md.