-
a9a86c94ad
docs(changelog): fold cloak polish (RST/ICMP/SS, L2 responder) into 1.2.1
main
1.2.1
anti
2026-06-20 00:41:07 -04:00
-
6b997c5de8
Merge feat/cloak-fingerprint-polish into 1.2.1
anti
2026-06-20 00:40:37 -04:00
-
-
4798a9eb9c
feat(cloak): broaden mangler to RST/ICMP + L2 responder injection
anti
2026-06-20 00:35:51 -04:00
-
-
65d33bc611
docs(changelog): 1.2.1 — OS fingerprint cloak
anti
2026-06-20 00:26:57 -04:00
-
e9cc09a50f
chore(release): bump version to 1.2.1
anti
2026-06-20 00:24:57 -04:00
-
a7256276b0
Merge feat/os-fingerprint-cloak: cloak egress fingerprint masquerading (v1.2.1)
anti
2026-06-20 00:24:32 -04:00
-
-
402c1ef7a2
feat(cloak): wire cloak into the deploy path for windows* deckies
anti
2026-06-20 00:22:38 -04:00
-
f715ac6bcd
feat(cloak): egress SYN-ACK mangler + T2/T3 probe-response synthesizer
anti
2026-06-19 21:32:50 -04:00
-
082d3fec19
fix(os-fingerprint): Win timestamps ON + windows_server profile + OS_MANGLE schema
anti
2026-06-19 21:32:43 -04:00
-
-
3ed6d5dfc6
refactor: consolidate writable-dir probe into decnet/paths.py
anti
2026-06-18 21:27:36 -04:00
-
2ca6533666
fix(topology): anchor compose path to run dir, stop install-dir litter
anti
2026-06-18 21:24:00 -04:00
-
bf66e875a5
chore: drop decnet.tar build artifact, gitignore it
anti
2026-06-18 21:16:29 -04:00
-
b0bf31a31e
feat(topology): scan-based creation wizard option (Pro contract + wiring)
anti
2026-06-18 20:35:35 -04:00
-
d7a2b5b9cf
Merge release/1.2: prefork consolidation (v1.2.0)
v1.2.0
anti
2026-06-18 19:44:17 -04:00
-
-
c918538f35
release: bump to v1.2.0; finalize CHANGELOG
anti
2026-06-18 19:43:53 -04:00
-
beaa604811
chore(1.2): remove per-worker unit templates superseded by consolidation
anti
2026-06-18 19:42:51 -04:00
-
7b0ff127c3
docs(1.2): heavy fleet verified live — ~412MB Pss vs 661MB; prefork helps base-floor-bound workers
anti
2026-06-18 19:39:15 -04:00
-
419172ecfb
docs(1.2): changelog — decnet fleet prefork command
anti
2026-06-18 19:32:38 -04:00
-
fcc9a9aad1
feat(1.2): decnet fleet — prefork master for the heavy worker tier
anti
2026-06-18 19:32:27 -04:00
-
1a765854ec
fix(1.2): relocate ATT&CK bundle to decnet/data/, bump 19.0 -> 19.1
anti
2026-06-18 19:02:58 -04:00
-
a5e11f7d86
chore(1.2): open 1.2.0 dev cycle (version 1.2.0.dev0, CHANGELOG Unreleased)
anti
2026-06-18 18:53:35 -04:00
-
74096b6df0
feat(1.2): prefork supervisor primitive + tests (C, CoW gate passed)
anti
2026-06-18 18:36:38 -04:00
-
-
af615f8d44
Merge release/1.1.1: ttp test fixes (v1.1.1)
v1.1.1
anti
2026-06-18 19:23:48 -04:00
-
-
d1974ca6f6
release: bump to v1.1.1 (test-only patch)
anti
2026-06-18 19:23:39 -04:00
-
a26dfe4d47
fix(ttp): correct stale clip tests to ceiling semantics + document ATTACKER_FINGERPRINTED topic
anti
2026-06-18 19:22:45 -04:00
-
-
3a3392bdee
Merge release/1.1: worker consolidation (v1.1.0)
v1.1.0
anti
2026-06-18 18:52:53 -04:00
-
-
c7d5f3a086
release: bump to v1.1.0; add CHANGELOG
anti
2026-06-18 18:52:31 -04:00
-
bce2c1940c
feat(1.1): supervise cpu group with ProcessPoolExecutor kernel offload
anti
2026-06-17 17:35:42 -04:00
-
6d7d2c0e24
chore: stop tracking development/ (internal design notes)
anti
2026-06-17 17:29:21 -04:00
-
3df9770cec
docs(1.1): batch group VERIFIED LIVE — 509MB -> 129MB (-380MB / 75%)
anti
2026-06-17 17:28:18 -04:00
-
b1cda1b015
fix(1.1): add decnet-enrich.service to batch supervisor Conflicts=
anti
2026-06-17 17:26:09 -04:00
-
5b56c66bb5
docs(1.1): measured batch-group RAM delta (-350MB / ~70%)
anti
2026-06-17 16:57:21 -04:00
-
805e2b33fc
docs(1.1): mark C5 batch group shipped, live-swap verification pending
anti
2026-06-17 16:50:43 -04:00
-
3a46864f30
feat(1.1): decnet supervise batch group + systemd unit (C5)
anti
2026-06-17 16:50:09 -04:00
-
12aaa9d820
feat(1.1): in-process worker supervision primitive (C5)
anti
2026-06-17 16:48:32 -04:00
-
23075bcdcd
docs(1.1): correct grouping to co-residency reality
anti
2026-06-17 16:47:13 -04:00
-
fc43909221
docs(1.1): consolidation design — supervise by failure domain
anti
2026-06-17 16:40:19 -04:00
-
87eb986467
docs(1.1): correct strategy — consolidation is primary lever (C3)
anti
2026-06-17 16:36:04 -04:00
-
4e2b1cdaf3
perf(1.1): lazy topology.generate re-export (C2)
anti
2026-06-17 16:35:30 -04:00
-
825d7d72c9
docs(1.1): RAM footprint analysis + release plan
anti
2026-06-17 16:32:54 -04:00
-
-
70e566db42
Merge feat/pro-cli-surface: pro CLI/daemon extension surface
anti
2026-06-17 15:21:07 -04:00
-
-
62f5fb652e
feat(pro): add pro CLI/daemon extension surface
anti
2026-06-17 15:21:06 -04:00
-
-
dd1b754f65
Merge feat/pro-extension-surfaces: multi-surface pro extension points
anti
2026-06-17 15:02:28 -04:00
-
-
a47f99c449
feat(pro): generalize pro tier to multi-surface extension points
anti
2026-06-17 15:02:28 -04:00
-
-
80c92a6f80
Merge feat/open-core-tiers: community/professional tier split + dual-license
anti
2026-06-17 13:23:53 -04:00
-
-
777606681e
fix(tests): drop illegal @pytest.mark.anyio on anyio_backend fixture
anti
2026-06-17 13:22:35 -04:00
-
d90bc81060
feat(services): open-core community/professional tier split
anti
2026-06-17 13:22:35 -04:00
-
-
09b6a832ee
docs(readme): add logo banner + badges to header
anti
2026-06-16 19:13:17 -04:00
-
e95acbd4f2
Merge dev into main for v1.0.0 release
anti
2026-06-16 19:04:04 -04:00
-
-
36353026a6
release: bump to v1.0.0; add PyPI metadata; stop globbing decnet_web into packages
v1.0.0
dev
anti
2026-06-16 18:59:48 -04:00
-
a5cb20051f
test(mazenet): add useMazeApi tests
anti
2026-06-16 18:56:13 -04:00
-
a9c3f42ef9
feat(mazenet): topology editor updates; refine mutator ops materialisation
anti
2026-06-16 18:55:20 -04:00
-
c9e4bf4022
feat(clustering): link identities by keystroke-rhythm proximity
anti
2026-06-16 17:09:42 -04:00
-
869d1eabb7
feat(clustering): roll session digraph SimHashes into identity centroid
anti
2026-06-16 17:05:34 -04:00
-
66c73ce59d
feat(profiler): extract motor.digraph_simhash keystroke biometric
anti
2026-06-16 16:59:57 -04:00
-
372375194c
refactor(db): run Alembic at boot, retire ad-hoc _migrate_* helpers
anti
2026-06-16 16:31:10 -04:00
-
ef4d67cbef
build(db): add Alembic scaffolding + baseline migration
anti
2026-06-16 16:30:29 -04:00
-
4f141c1a54
feat(web): stage live MazeNET edits behind an UPDATE button
anti
2026-06-16 12:59:57 -04:00
-
f18bfee746
fix(web): serialize live topology mutations + surface failures loudly
anti
2026-06-16 12:44:34 -04:00
-
5505de782f
feat(web): wire local-decky teardown to DELETE /deckies/{name}
anti
2026-06-16 12:15:48 -04:00
-
0c10869e26
feat(web): DELETE /deckies/{name} single-decky teardown endpoint
anti
2026-06-16 12:07:10 -04:00
-
8db593a544
test(api): repair pre-existing rotted tests (SSE ticket flow, password policy)
anti
2026-06-16 12:06:56 -04:00
-
9eb2803d04
chore(deps): bump cryptography/python-multipart/starlette for CVEs
anti
2026-06-16 12:06:20 -04:00
-
207494f41e
fix(web): duplicated deploy log lines + cancelled auto-close in DeployWizard
anti
2026-06-13 00:34:21 -04:00
-
2a9d1989b6
fix(web): stop runaway deploy-success loop in DeployWizard
anti
2026-06-13 00:19:39 -04:00
-
ab1151ee7f
fix(fleet): read existing fleet from fleet_deckies, not State["deployment"] (BUG-2)
anti
2026-06-12 23:52:20 -04:00
-
408810b3e2
chore(security): pin TLSv1.2 floor on control-plane mTLS clients
anti
2026-06-12 19:06:50 -04:00
-
efe4e49de6
fix(web): restore SSE streams via single-use ticket flow
anti
2026-06-12 19:00:15 -04:00
-
593492411c
feat(web): live password-strength checklist on change-password
anti
2026-06-12 18:59:46 -04:00
-
721122a7ef
chore(types): enable warn_return_any and cast all no-any-return sites
anti
2026-06-12 18:21:22 -04:00
-
337520c7ad
fix(security): close INFO ASVS findings — secret echo, TLS floor, mandatory tarball SHA, CORS/Content-Type guards, BUG-17
anti
2026-06-10 13:50:06 -04:00
-
245975a6dd
fix(security): close LOW ASVS findings — env bypass, SSE/deployment authz, CN fail-close, password byte-limit, exception leaks, BUG-12..16
anti
2026-06-10 13:27:14 -04:00
-
d80e6aa6d1
fix(security): close MEDIUM ASVS findings — JWT pinning, SSE tickets, SSRF, mTLS pin, rate limits + correctness bugs
anti
2026-06-10 12:32:15 -04:00
-
6a8af315fb
fix(core): close HIGH ASVS findings V7.1.1 and correctness bugs BUG-1..6
anti
2026-06-09 23:12:49 -04:00
-
8d18c59201
fix(swarm): require admin JWT on all swarm operator endpoints
anti
2026-06-09 17:08:10 -04:00
-
ae16c4437b
feat(auth): make access-token TTL configurable, default 4h
anti
2026-05-30 23:05:05 -04:00
-
9fc489258b
fix(auth): bulk-revoke sessions on password and role change
anti
2026-05-30 18:27:53 -04:00
-
c82897193e
feat(auth): logout endpoint revokes the presented token
anti
2026-05-30 18:21:16 -04:00
-
698ecaa322
feat(auth): jti claim and token-revocation store
anti
2026-05-30 18:18:41 -04:00
-
fdb6507c6f
fix(env): fail closed on weak DECNET_ADMIN_PASSWORD
anti
2026-05-30 17:31:00 -04:00
-
28327a9b4e
fix(swarm): ship update tarball from an explicit include-list, never secrets
anti
2026-05-30 17:26:23 -04:00
-
a4193d7022
fix(updater): enforce master CN gate and mandatory tarball checksum
anti
2026-05-30 17:22:12 -04:00
-
30750d294d
fix(swarm): mTLS client-cert authz on the swarm control plane
anti
2026-05-30 17:16:12 -04:00
-
e7a686206c
refactor(swarm): shared mTLS peer-identity helper
anti
2026-05-30 17:03:13 -04:00
-
431c86bbe8
docs: fix CLI references and start commands in README
anti
2026-05-27 13:03:45 -04:00
-
47c570c44d
docs: update README to reflect current codebase state
anti
2026-05-26 01:00:00 -04:00
-
f47dd4b520
docs: update README to reflect current codebase state
anti
2026-05-26 00:57:40 -04:00
-
f2b3393669
chore: relicense to AGPL-3.0-or-later and add SPDX headers
anti
2026-05-22 21:04:16 -04:00
-
ee10b55cfe
fix(engine): per-scope docker compose project names
anti
2026-05-22 18:29:33 -04:00
-
1b90048715
fix(api): /deckies/deploy becomes additive by default
anti
2026-05-22 18:14:50 -04:00
-
5b13a01ab6
feat(web): deploy wizard polls async lifecycle instead of holding HTTP
anti
2026-05-22 17:50:26 -04:00
-
eacac9aa60
feat(api): GET /deckies/lifecycle + master startup sweep
anti
2026-05-22 16:44:17 -04:00
-
4743c8f733
feat(api): /deckies/deploy and /mutate become 202 fire-and-forget
anti
2026-05-22 16:40:55 -04:00
-
e5e2bec3aa
feat(swarm): heartbeat handler applies lifecycle deltas
anti
2026-05-22 16:33:48 -04:00
-
d1ca96b2f4
feat(agent): /deploy and /mutate become 202 fire-and-forget
anti
2026-05-22 16:31:23 -04:00
-
c0ad380020
feat(lifecycle): runner + strategies + bus topic
anti
2026-05-22 16:25:33 -04:00
-
05c0721a51
feat(db): add DeckyLifecycle table for async deploy/mutate tracking
anti
2026-05-22 16:20:00 -04:00
-
ade8bbe30a
feat(agent): real worker-side /mutate with master swarm dispatch
anti
2026-05-22 16:14:46 -04:00
-
418245f9b4
chore(deps): bump starlette to 1.0.1 (PYSEC-2026-161)
anti
2026-05-22 16:14:35 -04:00
-
8eccb260be
feat(dns-service): expose DNS_STATE_PATH config field
anti
2026-05-21 22:10:43 -04:00