pkg

Sovereign pkg (@lgcorzo/pkg)

Collection of common Go utility packages used across the Sovereign MinIO Ecosystem and the Dark Gravity Factory.

Capabilities & Package Overview

@lgcorzo/pkg provides core utility primitives, policy evaluation engines, cryptographic cert management, and environment abstraction routines used across sovereign infrastructure:

Dark Gravity Factory & Sovereign Maintenance Rationale

This repository is maintained as an active, sovereign fork under @lgcorzo to support the Dark Gravity Factory initiative and the 38 interconnected storage and AI production repositories.

Why Sovereign Maintenance?

1. Full Supply-Chain Autonomy: Zero reliance on upstream breaking license changes, unannounced deprecations, or sudden repository archivals. Every dependency in @lgcorzo/pkg is controlled, audited, and built from source.
2. Dark Gravity Factory Core Integration: Powers autonomous AI agents, high-throughput distributed object storage, cryptographic key distribution, and enterprise security policies across the Dark Gravity AI pipeline.
3. Compliance & Security: Guarantees full alignment with regulatory standards including the EU AI Act, SOC 2 Type II, ISO 25059, and strict zero-CVE SLAs through automated vulnerability scanning (govulncheck) and continuous static analysis.
4. Ecosystem Interoperability: Native, seamless integration across all 38 repositories in the @lgcorzo sovereign ecosystem without module path collisions or upstream dependency rot.

Sovereign MinIO Ecosystem (38 Repositories)

The table below outlines the 38 interconnected repositories comprising the @lgcorzo sovereign architecture:

Automated CI/CD Maintenance & Compliance Workflow

The diagram below illustrates the automated sovereign CI/CD validation pipeline enforcing security, compliance, and multi-architecture compatibility across @lgcorzo/pkg:

┌─────────────────────────────────────────────────────────────────────────┐
│                    Dark Gravity CI/CD Automation                        │
└─────────────────────────────────────────────────────────────────────────┘
                                     │
     ┌───────────────────────────────┼───────────────────────────────┐
     ▼                               ▼                               ▼
┌─────────┐                     ┌─────────┐                     ┌─────────┐
│  Build  │                     │ Security│                     │ Compli- │
│ Matrix  │                     │ & Vuln  │                     │  ance   │
└────┬────┘                     └────┬────┘                     └────┬────┘
     │                               │                               │
     ├── Linux (amd64, arm64)        ├── govulncheck                 ├── EU AI Act
     ├── macOS (amd64, arm64)        ├── golangci-lint               ├── SOC 2 Type II
     └── Windows (amd64)             └── race detector               └── ISO 25059
     │                               │                               │
     └───────────────────────────────┼───────────────────────────────┘
                                     │
                                     ▼
                      ┌─────────────────────────────┐
                      │    Sovereign AI Factory     │
                      │   Production Ready Build    │
                      └─────────────────────────────┘

Installation & Usage

Import @lgcorzo/pkg in your Go project:

import (
	"github.com/lgcorzo/pkg/v3/certs"
	"github.com/lgcorzo/pkg/v3/env"
	"github.com/lgcorzo/pkg/v3/policy"
	"github.com/lgcorzo/pkg/v3/wildcard"
)

To run unit tests and linter locally:

make test
make lint

License

Use of @lgcorzo/pkg is governed by the GNU AGPLv3 license that can be found in the LICENSE file.