brig·id is a self-hosted identity provider built around passkeys (WebAuthn), OIDC, and hybrid post-quantum cryptography.
| Repository | Role |
|---|---|
.github |
Shared GitHub defaults, community files, and org profile |
roots |
Orchestration — canonical AGENTS.md, devcontainer, VS Code workspace |
cli |
brigid dev orchestrator CLI |
crypto |
Cryptographic primitives |
core |
Business logic crates |
server-leaf |
Single-server deployment binary |
server-grove |
Multi-server orchestration (future) |
server-forest |
Global federation layer (future) |
spec |
Technical specs for audit |
app |
Qwik UI |
site |
Public marketing/landing site |
- passwordless authentication with WebAuthn / passkeys
- OIDC issuance with pairwise, non-correlable subject identifiers
- hybrid post-quantum cryptography alongside classical primitives
- privacy-respecting, decentralized-compatible identity (DID:web)
- self-hostable: single-server today (
server-leaf), multi-server and federated deployments planned (server-grove,server-forest)
Roadmap and in-progress work are tracked on GitHub Project 1, not in this file.