Identity/EngPlan/wVEC - Revision history

Rafrombrc: /* Web Verified Email Client (wVEC) */

2011-07-05T21:07:12Z

Web Verified Email Client (wVEC)

← Older revision		Revision as of 21:07, 5 July 2011
Line 18:		Line 18:
	== Web Verified Email Client (wVEC) ==		== Web Verified Email Client (wVEC) ==
	{{WorkItem		{{WorkItem
	\|workItemDesc=~~Local crypto implementation, (notably Random Number Generator)~~		\|workItemDesc=Integrate better PRNG Javascript library with RSA library
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=664593		\|bug=664593
	\|assumes=InfraSec sign off on ~~secure~~ javascript crypto ~~library~~		\|assumes=InfraSec sign off on all javascript crypto libraries
	\|workingEst= 2 days		\|workingEst= 2 days
	\|bestCase= 1 day		\|bestCase= 1 day
Line 28:		Line 28:
	}}		}}

	The plan ~~here~~ is to use the [http://www-cs-students.stanford.edu/~tjw/jsbn/ twu-rsa] library for the RSA implementation, but to replace the ArcFour-based PRNG that it includes w/ the Fortuna-derived PRNG that comes w/ the [http://crypto.stanford.edu/sjcl/ SJCL]. This will be seeded w/ entropy from the user actions and from the server.		The plan is to use the [http://www-cs-students.stanford.edu/~tjw/jsbn/ twu-rsa] library for the RSA implementation, but to replace the ArcFour-based PRNG that it includes w/ the Fortuna-derived PRNG that comes w/ the [http://crypto.stanford.edu/sjcl/ SJCL]. This will be seeded w/ entropy from the user actions and from the server.

	{{WorkItem		{{WorkItem
	\|workItemDesc=~~UI responsibilities~~ (~~IOW: what UI elements live on the server vs~~. ~~what are presented from inside the library~~)		\|workItemDesc=Core HTML VEP client implementation
			\|assignee=rmiller
			\|bug=664598
			\|assumes=Related server components are implemented / working
			\|workingEst= 7 days (4 days complete, 3 days remaining)
			\|bestCase= 6 days (i.e. 2 days remaining)
			\|worstCase= 9 days (i.e. 5 days remaining)
			\|mostLikely= 7 days (3 days remaining)
			}}

			{{WorkItem
			\|workItemDesc=UI interaction through account creation / email verification / login portion of VEP process
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=664594		\|bug=664594
	\|assumes=~~UX fully defined.~~		\|assumes=Related server components are implemented / working
	\|workingEst= 2 days		\|workingEst= 2 days
	\|bestCase= 0.5 days		\|bestCase= 0.5 days
	\|worstCase= 4 days		\|worstCase= 4 days
	\|mostLikely= 2 days		\|mostLikely= 2 days
	}}		}}

	{{WorkItem		{{WorkItem
	\|workItemDesc=~~create~~ 'navigator.id' client wrapper and inter-~~frame~~ communications		\|workItemDesc=Create 'navigator.id' RP client wrapper and inter-window communications
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=664597		\|bug=664597
	\|assumes=		\|assumes=Services and InfraSec signoff on jschannel
	\|workingEst=1.5 days		\|workingEst=1.5 days
	\|bestCase=1.5 days		\|bestCase=1 days
	\|worstCase=3 days		\|worstCase=3 days
	\|mostLikely=1.5 days		\|mostLikely=1.5 days
	}}		}}

	Using [http://mozilla.github.com/jschannel/docs/ jschannel] to handle the inter-frame communication for now, pending review of the jschannel code by ~~multiple~~ Services engineers~~. This is 100% complete save for code review~~ and ~~any changes that may come as a result~~.		Using [http://mozilla.github.com/jschannel/docs/ jschannel] to handle the inter-frame communication for now, pending review of the jschannel code by Services engineers and InfraSec.

	{{WorkItem		{{WorkItem
	\|workItemDesc=Create ~~iframe containing actual~~ client ~~implementation, along with RP handshake~~		\|workItemDesc=Create 'navigator.id' IA client wrapper and inter-window communications
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~664598~~		\|bug=669455
	\|assumes=		\|assumes=Services and InfraSec signoff on jschannel
	\|workingEst= 4.5 days		\|workingEst=1.5 days
	\|bestCase= 3 days		\|bestCase=1 days
	\|worstCase= 9 days		\|worstCase=3 days
	\|mostLikely= 4 days		\|mostLikely=1.5 days
	}}		}}

	~~The non~~-~~UI parts~~ of ~~this are about 90% complete, minus~~ code ~~review~~ and ~~any resulting changes~~.		Using [http://mozilla.github.com/jschannel/docs/ jschannel] to handle the inter-frame communication for now, pending review of the jschannel code by Services engineers and InfraSec.

	{{WorkItem		{{WorkItem
Line 71:		Line 82:
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=664599		\|bug=664599
	\|assumes=~~UI finalized~~		\|assumes=Related server components are implemented / working
			\|workingEst= 2 days
			\|bestCase= 1 day
			\|worstCase= 4 days
			\|mostLikely= 2 days
			}}

			{{WorkItem
			\|workItemDesc=Certificate refresh (success cases)
			\|assignee=rmiller
			\|bug=668620
			\|assumes=Related server components are implemented / working
			\|workingEst= 4 days
			\|bestCase= 3 day
			\|worstCase= 8 days
			\|mostLikely= 4.5 days
			}}

			This process has to work both with our server and also with a primary authority using the iaWrapper.js wrapper.

			{{WorkItem
			\|workItemDesc=Certificate refresh (failure cases)
			\|assignee=rmiller
			\|bug=668625
			\|assumes=Related server components are implemented / working
	\|workingEst= 3 days		\|workingEst= 3 days
	\|bestCase= ~~1.5~~ days		\|bestCase= 2 days
	\|worstCase= 7.5 days		\|worstCase= 5 days
	\|mostLikely= 3 days		\|mostLikely= 3 days
	}}		}}

			This process has to work both with our server and also with a primary authority using the iaWrapper.js wrapper.

	{{WorkItem		{{WorkItem

Rafrombrc: /* Web Verified Email Client (wVEC) */

2011-06-21T21:40:06Z

Web Verified Email Client (wVEC)

← Older revision		Revision as of 21:40, 21 June 2011
Line 25:		Line 25:
	\|bestCase= 1 day		\|bestCase= 1 day
	\|worstCase= Unknown		\|worstCase= Unknown
	\|mostLikely= 2 days (provided InfraSec sign off)		\|mostLikely= 2 days (provided InfraSec sign off)
	}}		}}

			The plan here is to use the [http://www-cs-students.stanford.edu/~tjw/jsbn/ twu-rsa] library for the RSA implementation, but to replace the ArcFour-based PRNG that it includes w/ the Fortuna-derived PRNG that comes w/ the [http://crypto.stanford.edu/sjcl/ SJCL]. This will be seeded w/ entropy from the user actions and from the server.

	{{WorkItem		{{WorkItem
Line 49:		Line 51:
	\|mostLikely=1.5 days		\|mostLikely=1.5 days
	}}		}}

			Using [http://mozilla.github.com/jschannel/docs/ jschannel] to handle the inter-frame communication for now, pending review of the jschannel code by multiple Services engineers. This is 100% complete save for code review and any changes that may come as a result.

	{{WorkItem		{{WorkItem
Line 60:		Line 64:
	\|mostLikely= 4 days		\|mostLikely= 4 days
	}}		}}

			The non-UI parts of this are about 90% complete, minus code review and any resulting changes.

	{{WorkItem		{{WorkItem

Rafrombrc: /* External Dependencies */

2011-06-21T19:49:45Z

External Dependencies

@@ Line 112: / Line 112: @@
 |assumes=
 |workingEst= 5 days?
 |bestCase=
 |worstCase=

Rafrombrc: /* Web Verified Email Client (wVEC) */

2011-06-21T19:39:20Z

Web Verified Email Client (wVEC)

← Older revision		Revision as of 19:39, 21 June 2011
Line 44:		Line 44:
	\|bug=664597		\|bug=664597
	\|assumes=		\|assumes=
	\|workingEst=1 ~~day~~		\|workingEst=1.5 days
	\|bestCase=1 ~~day~~		\|bestCase=1.5 days
	\|worstCase=2 days		\|worstCase=3 days
	\|mostLikely=1 ~~day~~		\|mostLikely=1.5 days
	}}		}}

Line 55:		Line 55:
	\|bug=664598		\|bug=664598
	\|assumes=		\|assumes=
	\|workingEst= 3 days		\|workingEst= 4.5 days
	\|bestCase= 2 days		\|bestCase= 3 days
	\|worstCase= 6 days		\|worstCase= 9 days
	\|mostLikely= 2 days		\|mostLikely= 4 days
	}}		}}

Line 66:		Line 66:
	\|bug=664599		\|bug=664599
	\|assumes=UI finalized		\|assumes=UI finalized
	\|workingEst= 2 days		\|workingEst= 3 days
	\|bestCase= 1 days		\|bestCase= 1.5 days
	\|worstCase= 5 days		\|worstCase= 7.5 days
	\|mostLikely= 2 days		\|mostLikely= 3 days
	}}		}}

Line 77:		Line 77:
	\|bug=664601		\|bug=664601
	\|assumes=		\|assumes=
	\|workingEst= 3 days		\|workingEst= 5 days
	\|bestCase= 2 days		\|bestCase= 3 days
	\|worstCase= 5 days		\|worstCase= 7.5 days
	\|mostLikely= 3 days		\|mostLikely= 4.5 days
	}}		}}

Line 88:		Line 88:
	\|bug=664600		\|bug=664600
	\|assumes=		\|assumes=
	\|workingEst=2 days		\|workingEst=4 days
	\|bestCase=~~1 day~~		\|bestCase=2 days
	\|worstCase=4 days		\|worstCase=6 days
	\|mostLikely=2 days		\|mostLikely=4 days
	}}		}}

Line 97:		Line 97:
	{{WorkItem		{{WorkItem
	\|workItemDesc=Security Review		\|workItemDesc=Security Review
	\|assignee=~~rmiller~~		\|assignee=
	\|bug='''TBD'''		\|bug='''TBD'''
	\|assumes=requires InfraSec		\|assumes=requires InfraSec
	\|workingEst= 2 days		\|workingEst= 5 days?
	\|bestCase=		\|bestCase=
	\|worstCase=		\|worstCase=
Line 108:		Line 108:
	{{WorkItem		{{WorkItem
	\|workItemDesc=Packaging and Deployment		\|workItemDesc=Packaging and Deployment
	\|assignee=~~rmiller~~		\|assignee=
	\|bug='''TBD'''		\|bug='''TBD'''
	\|assumes=		\|assumes=
	\|workingEst= 5 days		\|workingEst= 5 days?
	\|bestCase=		\|bestCase=
	\|worstCase=		\|worstCase=

Jrconlin: /* Timeline */

2011-06-17T18:25:13Z

Timeline

← Older revision		Revision as of 18:25, 17 June 2011
Line 121:		Line 121:
	== Expected Completion ==		== Expected Completion ==
	== Milestones ==		== Milestones ==
	===Milestone 1: ~~Complete~~ client ~~library code~~ ===		===Milestone 1: Resolve client based Crypto concerns ===
	* library ~~creates navigator~~.~~id component which generates~~ RSA ~~signed identity assertions~~		There are several concerns regarding a javascript based crypto library. One of the larger is how the library can acquire a proper level of entropy. At this milestone, we will have resolved these issues and determined an appropriate approach to provide adequate RSA encryption.
	* ~~library generates headless and headed iframes for connections to the Identity Authority~~		* Associated Bugs: 664593
	* Working Estimate: 4 days		* Working Estimate: 4 days
	* Completion Date: '''TBD'''		* Completion Date: '''TBD'''

	===Milestone 2: ~~Library fully functional~~ ===		===Milestone 2: Complete interface elements ===
	* library able to ~~be embedded on 3rd party site~~ and ~~provide authenticated identity information using~~ the ~~Verified Email Protocol~~.		The library needs to communicate with the server. At this milestone, the client library will be able to communicate securely to the server and the Requesting Party site.
			* Associated Bugs: 664597, 664598
	* Working Estimate: 6 days		* Working Estimate: 6 days
	* Completion Date: '''TBD'''		* Completion Date: '''TBD'''

	===Milestone 3: ~~QA and Infrasec signoff~~ ===		===Milestone 3: UI Finalized ===
	* library ~~test suite is finalized and infrasec has reviewed~~ the ~~code~~ and ~~found no major security violations~~.		The library needs to present to the user various actionable elements. At this milestone, the client library will present those items to the user in a clear manner. NOTE: This will require working with UX and UI, which may impact deliverable date.
			* Associated Bugs: 664594, 664599
	* Working Estimate: 4 days		* Working Estimate: 4 days
			* Completion Date: '''TBD'''

			===Milestone 4: Wrapup ===
			The library needs to have full test cases working, documentation, and packaged for deployment and testing At this milestone, the library will be in a beta consumer ready state. Documentation and packaging may not be finalized, but they should be at a point where an external developer can set up and use the system with no prior knowledge of the system and minimal assistance.
			* Associated Bugs: 664601, 664600
			* Working Estimate: 5 days
	* Completion Date: '''TBD'''		* Completion Date: '''TBD'''

Jrconlin: /* Timeline */

2011-06-17T15:49:20Z

Timeline

← Older revision		Revision as of 15:49, 17 June 2011
Line 124:		Line 124:
	* library creates navigator.id component which generates RSA signed identity assertions		* library creates navigator.id component which generates RSA signed identity assertions
	* library generates headless and headed iframes for connections to the Identity Authority		* library generates headless and headed iframes for connections to the Identity Authority
	* Working Estimate: ~~'''TBD'''~~ days		* Working Estimate: 4 days
	* Completion Date: '''TBD'''		* Completion Date: '''TBD'''

	===Milestone 2: Library fully functional ===		===Milestone 2: Library fully functional ===
	* library able to be embedded on 3rd party site and provide authenticated identity information using the Verified Email Protocol.		* library able to be embedded on 3rd party site and provide authenticated identity information using the Verified Email Protocol.
	* Working Estimate: ~~'''TBD'''~~ days		* Working Estimate: 6 days
	* Completion Date: '''TBD'''		* Completion Date: '''TBD'''

	===Milestone 3: QA and Infrasec signoff ===		===Milestone 3: QA and Infrasec signoff ===
	* library test suite is finalized and infrasec has reviewed the code and found no major security violations.		* library test suite is finalized and infrasec has reviewed the code and found no major security violations.
	* Working Estimate: ~~'''TBD'''~~ days		* Working Estimate: 4 days
	* Completion Date: '''TBD'''		* Completion Date: '''TBD'''

Jrconlin: /* Web Verified Email Client (wVEC) */

2011-06-17T15:41:43Z

Web Verified Email Client (wVEC)

← Older revision		Revision as of 15:41, 17 June 2011
Line 22:		Line 22:
	\|bug=664593		\|bug=664593
	\|assumes=InfraSec sign off on secure javascript crypto library		\|assumes=InfraSec sign off on secure javascript crypto library
	\|workingEst=~~'''TBD'''~~		\|workingEst= 2 days
	\|bestCase=1 day		\|bestCase= 1 day
	\|worstCase=Unknown		\|worstCase= Unknown
	\|mostLikely=2 days (provided InfraSec sign off)		\|mostLikely= 2 days (provided InfraSec sign off)
	}}		}}

Line 33:		Line 33:
	\|bug=664594		\|bug=664594
	\|assumes=UX fully defined.		\|assumes=UX fully defined.
	\|workingEst=2 days		\|workingEst= 2 days
	\|bestCase=.5 days		\|bestCase= 0.5 days
	\|worstCase=4 days		\|worstCase= 4 days
	\|mostLikely=2 days		\|mostLikely= 2 days
	}}		}}

Line 55:		Line 55:
	\|bug=664598		\|bug=664598
	\|assumes=		\|assumes=
	\|workingEst=3 days		\|workingEst= 3 days
	\|bestCase=2 days		\|bestCase= 2 days
	\|worstCase=6 days		\|worstCase= 6 days
	\|mostLikely=2 days		\|mostLikely= 2 days
	}}		}}

Line 66:		Line 66:
	\|bug=664599		\|bug=664599
	\|assumes=UI finalized		\|assumes=UI finalized
	\|workingEst=2 days		\|workingEst= 2 days
	\|bestCase=1 days		\|bestCase= 1 days
	\|worstCase=5 days		\|worstCase= 5 days
	\|mostLikely=2 days		\|mostLikely= 2 days
	}}		}}

Line 77:		Line 77:
	\|bug=664601		\|bug=664601
	\|assumes=		\|assumes=
	\|workingEst=3 days		\|workingEst= 3 days
	\|bestCase=2 days		\|bestCase= 2 days
	\|worstCase=5 days		\|worstCase= 5 days
	\|mostLikely=3 days		\|mostLikely= 3 days
	}}		}}

Line 100:		Line 100:
	\|bug='''TBD'''		\|bug='''TBD'''
	\|assumes=requires InfraSec		\|assumes=requires InfraSec
	\|workingEst=~~'''TBD'''~~		\|workingEst= 2 days
	\|bestCase=		\|bestCase=
	\|worstCase=		\|worstCase=
Line 111:		Line 111:
	\|bug='''TBD'''		\|bug='''TBD'''
	\|assumes=		\|assumes=
	\|workingEst=~~'''TBD'''~~		\|workingEst= 5 days
	\|bestCase=		\|bestCase=
	\|worstCase=		\|worstCase=

Jrconlin: /* Web Verified Email Client (wVEC) */

2011-06-15T23:27:04Z

Web Verified Email Client (wVEC)

← Older revision		Revision as of 23:27, 15 June 2011
Line 20:		Line 20:
	\|workItemDesc=Local crypto implementation, (notably Random Number Generator)		\|workItemDesc=Local crypto implementation, (notably Random Number Generator)
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~'''TBD'''~~		\|bug=664593
	\|assumes=InfraSec sign off on secure javascript crypto library		\|assumes=InfraSec sign off on secure javascript crypto library
	\|workingEst='''TBD'''		\|workingEst='''TBD'''
Line 31:		Line 31:
	\|workItemDesc=UI responsibilities (IOW: what UI elements live on the server vs. what are presented from inside the library)		\|workItemDesc=UI responsibilities (IOW: what UI elements live on the server vs. what are presented from inside the library)
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~'''TBD'''~~		\|bug=664594
	\|assumes=UX fully defined.		\|assumes=UX fully defined.
	\|workingEst=2 days		\|workingEst=2 days
Line 42:		Line 42:
	\|workItemDesc=create 'navigator.id' client wrapper and inter-frame communications		\|workItemDesc=create 'navigator.id' client wrapper and inter-frame communications
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~'''TBD'''~~		\|bug=664597
	\|assumes=		\|assumes=
	\|workingEst=1 day		\|workingEst=1 day
Line 53:		Line 53:
	\|workItemDesc=Create iframe containing actual client implementation, along with RP handshake		\|workItemDesc=Create iframe containing actual client implementation, along with RP handshake
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~'''TBD'''~~		\|bug=664598
	\|assumes=		\|assumes=
	\|workingEst=3 days		\|workingEst=3 days
Line 64:		Line 64:
	\|workItemDesc=UI for displaying / selecting verified email addresses		\|workItemDesc=UI for displaying / selecting verified email addresses
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~'''TBD'''~~		\|bug=664599
	\|assumes=UI finalized		\|assumes=UI finalized
	\|workingEst=2 days		\|workingEst=2 days
Line 75:		Line 75:
	\|workItemDesc=Jasmine test coverage		\|workItemDesc=Jasmine test coverage
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~'''TBD'''~~		\|bug=664601
	\|assumes=		\|assumes=
	\|workingEst=3 days		\|workingEst=3 days
Line 86:		Line 86:
	\|workItemDesc=Documentation		\|workItemDesc=Documentation
	\|assignee=rmiller		\|assignee=rmiller
	\|bug=~~'''TBD'''~~		\|bug=664600
	\|assumes=		\|assumes=
	\|workingEst=2 days		\|workingEst=2 days

Jrconlin: Created page with "= Overview = [https://wiki.mozilla.org/Identity Identity] Engineering plan. This document addresses the build portions of the Identity service, including the Verified Email Pr..."

2011-06-15T22:53:36Z

Created page with "= Overview = [https://wiki.mozilla.org/Identity Identity] Engineering plan. This document addresses the build portions of the Identity service, including the Verified Email Pr..."

New page

= Overview =

[https://wiki.mozilla.org/Identity Identity] Engineering plan.

This document addresses the build portions of the Identity service, including the Verified Email Protocol (VEP), [[Identity/EngPlan/VESEngPlan | Verified Email Service]] (VES), [[Identity/EngPlan/wVEC| Web Based Verified Email Client]] (wVEC), [[Identity/EngPlan/fVEC| Firefox Native Verified Email Client]] (fVEC)

= Key People =

{{ProjectTeam
|techLead=[[rmiller|Rob Miller]]
|addedDevs=[[jconlin| JR Conlin]], [[ddahl| Dave Dahl]]
|projMgr=[[dmills| Dan Mills]]
|prodMgr=[[dmills| Dan Mills]]
|ux=TBD
}}

= Work Items =
== Web Verified Email Client (wVEC) ==
{{WorkItem
|workItemDesc=Local crypto implementation, (notably Random Number Generator)
|assignee=rmiller
|bug='''TBD'''
|assumes=InfraSec sign off on secure javascript crypto library
|workingEst='''TBD'''
|bestCase=1 day
|worstCase=Unknown
|mostLikely=2 days (provided InfraSec sign off)
}}

{{WorkItem
|workItemDesc=UI responsibilities (IOW: what UI elements live on the server vs. what are presented from inside the library)
|assignee=rmiller
|bug='''TBD'''
|assumes=UX fully defined.
|workingEst=2 days
|bestCase=.5 days
|worstCase=4 days
|mostLikely=2 days
}}

{{WorkItem
|workItemDesc=create 'navigator.id' client wrapper and inter-frame communications
|assignee=rmiller
|bug='''TBD'''
|assumes=
|workingEst=1 day
|bestCase=1 day
|worstCase=2 days
|mostLikely=1 day
}}

{{WorkItem
|workItemDesc=Create iframe containing actual client implementation, along with RP handshake
|assignee=rmiller
|bug='''TBD'''
|assumes=
|workingEst=3 days
|bestCase=2 days
|worstCase=6 days
|mostLikely=2 days
}}

{{WorkItem
|workItemDesc=UI for displaying / selecting verified email addresses
|assignee=rmiller
|bug='''TBD'''
|assumes=UI finalized
|workingEst=2 days
|bestCase=1 days
|worstCase=5 days
|mostLikely=2 days
}}

{{WorkItem
|workItemDesc=Jasmine test coverage
|assignee=rmiller
|bug='''TBD'''
|assumes=
|workingEst=3 days
|bestCase=2 days
|worstCase=5 days
|mostLikely=3 days
}}

{{WorkItem
|workItemDesc=Documentation
|assignee=rmiller
|bug='''TBD'''
|assumes=
|workingEst=2 days
|bestCase=1 day
|worstCase=4 days
|mostLikely=2 days
}}

=== External Dependencies ===
{{WorkItem
|workItemDesc=Security Review
|assignee=rmiller
|bug='''TBD'''
|assumes=requires InfraSec
|workingEst='''TBD'''
|bestCase=
|worstCase=
|mostLikely=
}}

{{WorkItem
|workItemDesc=Packaging and Deployment
|assignee=rmiller
|bug='''TBD'''
|assumes=
|workingEst='''TBD'''
|bestCase=
|worstCase=
|mostLikely=
}}

= Timeline =

== Expected Completion ==
== Milestones ==
===Milestone 1: Complete client library code ===
* library creates navigator.id component which generates RSA signed identity assertions
* library generates headless and headed iframes for connections to the Identity Authority
* Working Estimate: '''TBD''' days
* Completion Date: '''TBD'''

===Milestone 2: Library fully functional ===
* library able to be embedded on 3rd party site and provide authenticated identity information using the Verified Email Protocol.
* Working Estimate: '''TBD''' days
* Completion Date: '''TBD'''

===Milestone 3: QA and Infrasec signoff ===
* library test suite is finalized and infrasec has reviewed the code and found no major security violations.
* Working Estimate: '''TBD''' days
* Completion Date: '''TBD'''