Skip to content

docs(configuration): add FIPS 140-3 mode guide#14

Merged
xe-nvdk merged 1 commit into
mainfrom
docs/fips-mode
Jun 21, 2026
Merged

docs(configuration): add FIPS 140-3 mode guide#14
xe-nvdk merged 1 commit into
mainfrom
docs/fips-mode

Conversation

@xe-nvdk

@xe-nvdk xe-nvdk commented Jun 21, 2026

Copy link
Copy Markdown
Member

Adds the user-facing FIPS guide for the arc-fips build variant shipping in Arc 26.06.2 (code PR: Basekick-Labs/arc#512).

Covers:

  • Install paths: binary, container (:VERSION-fips), Helm
  • What FIPS mode enforces (validated module, FIPS-only runtime, approved TLS, PBKDF2 token hashing, fail-closed startup)
  • The cryptographic boundary (Go module only; DuckDB/SQLite do no crypto)
  • Required API-token rotation on cutover
  • Honest CMVP framing: the Go Cryptographic Module is certified; Arc itself is not a CMVP-listed module

🤖 Generated with Claude Code

Covers the arc-fips build variant: install paths (binary/container/Helm),
what FIPS mode enforces, the crypto boundary, the required API-token rotation
on cutover, and the honest CMVP framing (the Go Cryptographic Module is
certified; Arc itself is not a CMVP-listed module).
@xe-nvdk xe-nvdk merged commit 492a5d7 into main Jun 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant