Controlled upstream application for the STEVE browser/WASM and Rust SDK release gates. The UI and tests live in the STEVE repository; this app only runs behind STEVE inside the enclave.
  • JavaScript 68%
  • HCL 21.3%
  • Dockerfile 10.7%
Find a file
2026-08-24 12:40:23 +02:00
deploy test: add versioned STEVE Nitro fixture 2026-07-30 15:55:56 +02:00
.dockerignore test: add versioned STEVE Nitro fixture 2026-07-30 15:55:56 +02:00
Containerfile test: add versioned STEVE Nitro fixture 2026-07-30 15:55:56 +02:00
LICENSE Add MIT license 2026-08-24 12:40:23 +02:00
README.md test: add versioned STEVE Nitro fixture 2026-07-30 15:55:56 +02:00
server.mjs test: add versioned STEVE Nitro fixture 2026-07-30 15:55:56 +02:00

STEVE Nitro test fixture

Controlled upstream application for the STEVE browser/WASM and Rust SDK release gates. The UI and tests live in the STEVE repository; this app only runs behind STEVE inside the enclave.

Contract

Endpoint Expected behavior
GET /.well-known/steve-test-fixture steve-test-fixture/v1 capabilities
POST /echo Echo up to 1 MiB with the request content type
GET /unauthorized Controlled HTTP 401
GET /delay?ms=N Delay up to 10 seconds
GET /compressed Identity or gzip response based on Accept-Encoding
GET /health 200 OK

Deployment branches

main contains the shared app and the two configuration templates:

  • deploy/xwing/caution.hcl
  • deploy/x25519/caution.hcl

Create deploy/xwing and deploy/x25519 from a committed main, then copy the matching template to root caution.hcl on each branch. The X-Wing branch also commits the existing .caution/deployment.json. For X25519, replace x25519.example.invalid, run caution init, and commit the generated deployment file.

Before deployment:

curl -fsS https://<platform>/.well-known/caution/build-inputs | jq .steve
git push caution HEAD:main
caution verify --attestation-url https://<domain>/attestation

Do not add a Caution debug block. Both deployment configs allow the STEVE test UI origins http://localhost:3000 and http://127.0.0.1:3000.