Commit Graph

  • b86129e35e tests: realism migration regression coverage anti 2026-04-27 17:29:25 -04:00
  • a07fb3fe08 feat(realism): canary cultivator on the realism contract anti 2026-04-27 16:47:59 -04:00
  • 4e436da569 feat(realism): LLM enrichment for user-class file bodies anti 2026-04-27 16:42:58 -04:00
  • b321e29002 feat(realism): EditAction read-modify-write of planted files anti 2026-04-27 16:38:17 -04:00
  • 32eeb0c813 refactor(orchestrator): collapse decnet-emailgen.service into orchestrator anti 2026-04-27 16:33:04 -04:00
  • cb1872c52f feat(realism): synthetic_files table + planner wiring + scheduler swap anti 2026-04-27 16:22:07 -04:00
  • 636c057cc5 refactor(orchestrator): extract ActivityDriver ABC + driver factory anti 2026-04-27 16:09:46 -04:00
  • 0b9873982d refactor(realism): move emailgen LLM/personas/prompt into shared library anti 2026-04-27 16:05:43 -04:00
  • f57c621117 feat(realism): scaffold decnet/realism/ library anti 2026-04-27 15:55:21 -04:00
  • 6376523923 feat(canary): mysql_dump generator with phone-home replica payload anti 2026-04-27 13:52:55 -04:00
  • 5ac8e0f91a feat(canary): honeydoc_docx + honeydoc_pdf generators anti 2026-04-27 13:44:20 -04:00
  • c17b9e01c8 fix(canary): stream base64 payload via stdin to avoid ARG_MAX anti 2026-04-27 13:37:19 -04:00
  • af15e68a3d fix(web): pick decky from a select instead of a free-text input anti 2026-04-27 13:32:51 -04:00
  • fcdb32908d fix(web): canary header matches PersonaGeneration / DeckyFleet anti 2026-04-27 13:29:37 -04:00
  • 11b0a99914 fix(web): type-only import for CanaryTokenRow anti 2026-04-27 13:28:03 -04:00
  • e2c8b77546 feat(web): canary tokens page (under AUTOMATION) anti 2026-04-27 13:27:14 -04:00
  • 53d08e01e5 feat(systemd): decnet-canary.service unit + tests anti 2026-04-27 13:20:47 -04:00
  • 34c85346a6 feat(deploy): seed canary baseline at deploy time + tests anti 2026-04-27 13:19:08 -04:00
  • 6c4ea706f8 feat(api): canary token CRUD router (/api/v1/canary) + tests anti 2026-04-27 13:18:00 -04:00
  • f9513bb7dd feat(cli): register decnet canary subcommand + tests anti 2026-04-27 13:13:23 -04:00
  • fae3e0caa3 feat(canary): worker (HTTP + stdlib DNS callback receivers) + tests anti 2026-04-27 13:12:05 -04:00
  • 8fb9bc5545 feat(canary): planter (docker exec injector) + tests anti 2026-04-27 13:08:18 -04:00
  • 19ceff4417 feat(canary): operator-upload instrumenters + tests anti 2026-04-27 13:03:42 -04:00
  • c7658ea65e feat(canary): synthesised-artifact generators + tests anti 2026-04-27 12:59:19 -04:00
  • 8f19adecfe feat(canary): package scaffolding (base/factory/paths/storage) + tests anti 2026-04-27 12:56:01 -04:00
  • 6a0d140e91 feat(db): canary token repository CRUD anti 2026-04-27 12:48:24 -04:00
  • 813f14bf2a feat(db): canary token tables (blob/token/trigger) anti 2026-04-27 12:45:41 -04:00
  • 914c911984 feat(bus): canary token bus topics (placed/triggered/revoked) anti 2026-04-27 12:43:23 -04:00
  • 94a0b46fb9 chore: dashboard layout polish + sqlite_vec dependency anti 2026-04-27 10:12:55 -04:00
  • 828165783e feat(templates): standalone NTLMSSP Type 3 parser + decnet-init wrapper anti 2026-04-27 10:12:30 -04:00
  • 22d082ac9a chore: gitignore rotated logs, topology compose fragments, .docker cache anti 2026-04-27 10:12:05 -04:00
  • f046634d6e feat(web): Persona Generation page under AUTOMATION anti 2026-04-27 09:55:42 -04:00
  • 818aebadfc feat(web): emailgen events in Orchestrator page anti 2026-04-26 22:56:48 -04:00
  • f97ec4c2c1 feat(deploy): emailgen systemd unit + bring orchestrator + emailgen into decnet.target anti 2026-04-26 22:49:16 -04:00
  • 73692b52f0 feat(emailgen): gate as master-only anti 2026-04-26 22:45:59 -04:00
  • 6d520eaa6f refactor(emailgen): pluggable LLM backend (base/factory/impl) anti 2026-04-26 22:43:36 -04:00
  • 4badc75fb2 feat(emailgen): global persona pool + Date-stamped EML mtimes anti 2026-04-26 22:39:16 -04:00
  • 2979997442 feat(templates): IMAP/POP3 servers read EML spool from emailgen anti 2026-04-26 22:21:01 -04:00
  • 3ee55ec341 feat(emailgen): Ollama-driven fake email worker for IMAP/POP3 deckies anti 2026-04-26 22:16:19 -04:00
  • 674028d476 feat(web): row-click inspector drawer for orchestrator events anti 2026-04-26 21:44:52 -04:00
  • 9650366d34 fix(orchestrator): drop topology_deckies FK on event src/dst columns anti 2026-04-26 21:40:06 -04:00
  • c3518e3159 feat(workers): surface clusterer, campaign-clusterer, reconciler in panel anti 2026-04-26 21:31:34 -04:00
  • 430262e01a feat(fleet): systemd unit + bus signal for fleet reconciler anti 2026-04-26 21:21:36 -04:00
  • a8441481b5 fix(orchestrator): see fleet + shard deckies, not just topology rows anti 2026-04-26 21:16:22 -04:00
  • f775223a83 feat(fleet): reconciler converges JSON ↔ DB ↔ docker anti 2026-04-26 21:14:48 -04:00
  • 8814902999 docs(api): clarify fleet_deckies + JSON dual-write happens in engine.deployer anti 2026-04-26 21:08:44 -04:00
  • 646aeeca40 feat(deployer): mirror fleet deploy/teardown into fleet_deckies table anti 2026-04-26 21:05:50 -04:00
  • 095500ae9a feat(db): FleetDecky table mirrors decnet-state.json into the DB anti 2026-04-26 21:00:01 -04:00
  • 10fa8a84d1 docs(roadmap): mark TTL + TCP/IP stack fingerprinting complete anti 2026-04-26 20:30:46 -04:00
  • c595d039bd feat(sniffer): ISN sequence classifier (reuses seq_class helper) anti 2026-04-26 20:30:24 -04:00
  • 0e40cc8ae1 feat(sniffer): IP-ID sequence classifier (random/incremental/zero/constant) anti 2026-04-26 20:28:32 -04:00
  • b0b08754d0 feat(fingerprint): ToS/DSCP/ECN extraction in active + passive TCP fingerprint anti 2026-04-26 20:25:37 -04:00
  • 453ab177b4 style(web): scoped Orchestrator.css mirroring Bounty/DeckyFleet pattern anti 2026-04-26 20:09:33 -04:00
  • 8d1c449173 docs(debt): log DEBT-042 + DEBT-043 from orchestrator UI scope anti 2026-04-26 20:01:58 -04:00
  • c5ad04620b feat(web): Orchestrator page + SSE hook + AUTOMATION nav group anti 2026-04-26 20:01:02 -04:00
  • 3de19eb102 feat(orchestrator): periodic prune of orchestrator_events anti 2026-04-26 19:58:43 -04:00
  • 5b5ff54fa2 feat(web): orchestrator events read API + SSE stream anti 2026-04-26 19:58:12 -04:00
  • 900c0c3ef5 refactor(bus): rename ORCHESTRATOR_ACTIVITY → ORCHESTRATOR_TRAFFIC anti 2026-04-26 19:53:40 -04:00
  • 4c37ece39e feat(orchestrator): MVP synthetic life-injection worker (SSH only) anti 2026-04-26 19:43:20 -04:00
  • cc2deb73f7 feat(web): Identities + Campaigns list pages + THREAT DATA nav group anti 2026-04-26 09:32:00 -04:00
  • 7fafdd66de feat(deploy): systemd units for identity + campaign clusterers anti 2026-04-26 09:22:02 -04:00
  • d531cea536 feat(web): read-only campaigns API + SSE + frontend anti 2026-04-26 09:20:17 -04:00
  • 75af00c9c8 test(clustering): full-bound passes through production campaign clusterer anti 2026-04-26 09:13:59 -04:00
  • 6936a1426c feat(clustering): campaign-clusterer worker + bus topics + CLI anti 2026-04-26 09:04:00 -04:00
  • 0946bab424 feat(clustering): campaign-level similarity primitives anti 2026-04-26 08:57:46 -04:00
  • 0a1cf65ddb feat(db): Campaign SQLModel + repo write/read methods anti 2026-04-26 08:54:28 -04:00
  • 059d1dba75 feat(web): live identity-resolution updates via SSE anti 2026-04-26 08:38:27 -04:00
  • 97aa57faed feat(api): SSE stream for identity events at /api/v1/identities/events anti 2026-04-26 08:36:17 -04:00
  • e364ef8859 feat(clustering): revocable merges (merge + unmerge) anti 2026-04-26 08:33:32 -04:00
  • 87412da1ca test(clustering): F6 noise-floor ratchets for production clusterer anti 2026-04-26 08:28:31 -04:00
  • 7923006203 test(clustering): F7 slow-burn time-agnostic invariant anti 2026-04-26 08:26:23 -04:00
  • 6a4592a8f5 test(clustering): low/very-low tier safety + F1/F2 ratchets anti 2026-04-26 08:25:23 -04:00
  • ed323581fe feat(clustering): fingerprint-disagreement veto for fixture 5 anti 2026-04-26 08:24:22 -04:00
  • f7da33726c feat(clustering): combined edge weight + medium-tier wiring anti 2026-04-26 08:22:10 -04:00
  • de2f4c3a62 feat(clustering): wire high-weight edges end-to-end anti 2026-04-26 08:19:56 -04:00
  • a9775c4000 feat(clustering): similarity-graph primitives anti 2026-04-26 08:13:29 -04:00
  • fb522af107 feat(bus): reserve identity.unmerged topic anti 2026-04-26 08:10:56 -04:00
  • e545f7d8d3 feat(clustering): identity clusterer worker skeleton anti 2026-04-26 08:09:11 -04:00
  • 6b6a808a4a test(clustering): fixture 7 slow_burn + recency_decay reference anti 2026-04-26 07:58:23 -04:00
  • 7021fda0e6 test(clustering): fixture 6 noise_floor (composite + cross-corpus) anti 2026-04-26 07:49:36 -04:00
  • 27f7de9886 test(clustering): fixture 5 multi_operator + c2/shift/composite refs anti 2026-04-26 07:46:14 -04:00
  • 304592abfe test(clustering): fixture 4 paused_campaign + active_days/time_window anti 2026-04-26 07:39:46 -04:00
  • 0def6f7e37 test(clustering): fixture 2 vpn_hopping + fingerprint/asn references anti 2026-04-26 07:34:18 -04:00
  • 943bb3a39d docs(identity): resolve merge revocability + SSE open questions anti 2026-04-26 07:33:36 -04:00
  • f6b83755eb test(clustering): factory honors ip_pool: rotating + 3-level truth labels anti 2026-04-26 07:19:39 -04:00
  • 4f1077be72 feat(bus): identity.* topic family (formed / observation.linked / merged) anti 2026-04-26 07:15:44 -04:00
  • 448212ebcd feat(web-ui): IdentityDetail page + conditional Identity badge on AttackerDetail anti 2026-04-26 07:12:37 -04:00
  • dc3d08dd41 feat(web): read-only /api/v1/identities/* endpoints + repo methods anti 2026-04-26 07:08:55 -04:00
  • 84c1ca9c9b feat(identity): AttackerIdentity table + nullable attackers.identity_id FK anti 2026-04-26 07:00:24 -04:00
  • 7904ef1308 docs(identity): IDENTITY_RESOLUTION.md design spec anti 2026-04-26 06:56:40 -04:00
  • e80f3eec54 test(clustering): fixture 1 (shared_wordlist) + fixture-harness extraction anti 2026-04-26 06:38:17 -04:00
  • 00254629f8 feat(clustering): UKC phase enum + synthetic campaign factory + metric harness anti 2026-04-26 06:29:10 -04:00
  • 3eb67c9400 refactor(intel): re-key attacker_intel on attacker_uuid (closes DEBT-041) anti 2026-04-26 05:35:29 -04:00
  • a009549326 feat(web): IntelPanel on AttackerDetail + DEBT-041 entry anti 2026-04-26 05:25:25 -04:00
  • 8a6d632ab0 feat(deploy): systemd unit for decnet-enrich + register in worker panel anti 2026-04-26 05:20:54 -04:00
  • 4ec0dd75c8 docs(roadmap): mark threat-intel enrichment shipped anti 2026-04-26 05:18:05 -04:00
  • d3d9bd5aa7 feat(intel): decnet enrich CLI + GET /attackers/{ip}/intel endpoint anti 2026-04-26 05:17:25 -04:00
  • cd70136d09 feat(intel): wire GreyNoise, AbuseIPDB, Feodo Tracker + ThreatFox anti 2026-04-26 05:15:17 -04:00
  • f49a7db07d feat(intel): worker shell + attacker.intel.enriched bus topic anti 2026-04-26 05:01:47 -04:00
  • 58ca9075db feat(net): stealth-egress httpx client factory anti 2026-04-26 04:59:34 -04:00