draft-myclerk-protocol
The MyClerk Protocol: Tiered Security Communication for Distributed Family Systems
This document specifies the MyClerk Protocol, a tiered-security
communication protocol designed for distributed family orchestration
systems. The protocol provides six security tiers ranging from
1-byte minimal overhead for tunneled messages to 144-byte full
security for critical operations. It supports multiple transport
mechanisms including NATS, Matrix, WebSocket, and direct TCP, while
maintaining end-to-end encryption using ChaCha20-Poly1305 AEAD with
hybrid post-quantum key establishment combining ML-KEM-768 and
X25519. A classical-only mode (X25519 without ML-KEM) remains
available for resource-constrained devices and legacy
interoperability.
The protocol is transport-agnostic, federation-capable, and optimized
for environments ranging from resource-constrained IoT devices to
full-featured desktop clients.