anti 4749c972e5 feat(prober-cert): schema for active TLS cert capture ...

Adds storage for TLS certificate details collected from attacker-run
servers by the active prober (sibling to the existing JARM probe).

- AttackerIdentity.tls_cert_sha256 / Campaign.tls_cert_sha256:
  JSON list[str] columns mirroring ja3_hashes / hassh_hashes for
  federation gossip.
- ingester clause 9b: emits a 'tls_certificate' fingerprint bounty
  when a prober event carries subject_cn (disjoint from the existing
  sniffer-gated clause).
- Prober-side capture (ssl.wrap_socket follow-up after JARM) and
  profiler rollup land in sibling commits.

2026-04-28 11:09:25 -04:00

..

db

feat(prober-cert): schema for active TLS cert capture

2026-04-28 11:09:25 -04:00

router

feat(realism): operator-tunable planner weights via realism_config

2026-04-27 18:00:08 -04:00

services

feat(web): add systemd_control helper for worker unit management

2026-04-22 14:08:35 -04:00

templates

feat(swarm): unbundle master-only code from agent tarball + sync systemd units on update

2026-04-19 19:19:17 -04:00

_uvicorn_tls_scope.py

fix(swarm): inject peer cert into ASGI scope for uvicorn <= 0.44

2026-04-19 22:09:11 -04:00

api.py

fix(test-schemathesis): disable rate limiter in fuzz subprocess

2026-04-28 09:51:49 -04:00

auth.py

perf: run bcrypt on a thread so it doesn't block the event loop

2026-04-17 14:52:22 -04:00

dependencies.py

chores: fix linting

2026-04-18 06:46:10 -04:00

ingester.py

feat(prober-cert): schema for active TLS cert capture

2026-04-28 11:09:25 -04:00

limiter.py

fix(stress): unblock Locust runs from login rate-limit self-DoS

2026-04-24 00:13:15 -04:00

sse_limits.py

feat(api/sse): per-user connection cap + viewer-safe invariant

2026-04-24 15:01:20 -04:00

swarm_api.py

fix(swarm): inject peer cert into ASGI scope for uvicorn <= 0.44

2026-04-19 22:09:11 -04:00

worker_registry.py

feat(workers): surface clusterer, campaign-clusterer, reconciler in panel

2026-04-26 21:31:34 -04:00