anti f715ac6bcd feat(cloak): egress SYN-ACK mangler + T2/T3 probe-response synthesizer ...

In-decky-netns NFQUEUE rewriter (window/option-order/IP-ID) and raw-socket
synthesizer for nmap probes Linux drops but the target OS answers (T2/T3),
driven by os_fingerprint.OS_MANGLE. Packet-shaping logic is pure and unit-tested
offline; scapy/netfilterqueue import lazily in the runtime loops. Entry:
python -m decnet.cloak (run by the base container; CAP_NET_ADMIN).

2026-06-19 21:32:50 -04:00

..

agent

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

artifacts

refactor(artifacts): extract shard-finder out of transcripts router

2026-05-08 18:49:11 -04:00

asn

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

bus

refactor: consolidate writable-dir probe into decnet/paths.py

2026-06-18 21:27:36 -04:00

canary

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

cli

feat(1.2): decnet fleet — prefork master for the heavy worker tier

2026-06-18 19:32:27 -04:00

cloak

feat(cloak): egress SYN-ACK mangler + T2/T3 probe-response synthesizer

2026-06-19 21:32:50 -04:00

clustering

feat(1.1): supervise cpu group with ProcessPoolExecutor kernel offload

2026-06-17 17:35:42 -04:00

collector

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

correlation

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

data

fix(1.2): relocate ATT&CK bundle to decnet/data/, bump 19.0 -> 19.1

2026-06-18 19:25:50 -04:00

decky_io

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

engine

fix(topology): anchor compose path to run dir, stop install-dir litter

2026-06-18 21:24:00 -04:00

fleet

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

geoip

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

intel

fix(security): close LOW ASVS findings — env bypass, SSE/deployment authz, CN fail-close, password byte-limit, exception leaks, BUG-12..16

2026-06-10 13:27:14 -04:00

lifecycle

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

logging

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

mutator

feat(mazenet): topology editor updates; refine mutator ops materialisation

2026-06-16 18:55:20 -04:00

net

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

orchestrator

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

prober

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

profiler

feat(profiler): extract motor.digraph_simhash keystroke biometric

2026-06-16 16:59:57 -04:00

realism

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

rpki

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

services

feat(pro): generalize pro tier to multi-surface extension points

2026-06-17 15:02:28 -04:00

sniffer

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

swarm

chore(security): pin TLSv1.2 floor on control-plane mTLS clients

2026-06-12 19:06:50 -04:00

tarpit

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

templates

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

topology

perf(1.1): lazy topology.generate re-export (C2)

2026-06-17 16:35:30 -04:00

ttp

fix(1.2): relocate ATT&CK bundle to decnet/data/, bump 19.0 -> 19.1

2026-06-18 19:25:50 -04:00

updater

chore(security): pin TLSv1.2 floor on control-plane mTLS clients

2026-06-12 19:06:50 -04:00

util

feat(profiler): extract motor.digraph_simhash keystroke biometric

2026-06-16 16:59:57 -04:00

vectorstore

refactor: consolidate writable-dir probe into decnet/paths.py

2026-06-18 21:27:36 -04:00

web

feat(pro): generalize pro tier to multi-surface extension points

2026-06-17 15:02:28 -04:00

webhook

fix(security): close MEDIUM ASVS findings — JWT pinning, SSE tickets, SSRF, mTLS pin, rate limits + correctness bugs

2026-06-10 12:32:15 -04:00

__init__.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

archetypes.py

fix(os-fingerprint): Win timestamps ON + windows_server profile + OS_MANGLE schema

2026-06-19 21:32:43 -04:00

composer.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

config_ini.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

config.py

fix(security): close INFO ASVS findings — secret echo, TLS floor, mandatory tarball SHA, CORS/Content-Type guards, BUG-17

2026-06-10 13:50:06 -04:00

custom_service.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

distros.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

env.py

fix(security): close INFO ASVS findings — secret echo, TLS floor, mandatory tarball SHA, CORS/Content-Type guards, BUG-17

2026-06-10 13:50:06 -04:00

ini_loader.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

models.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

network.py

chore(types): enable warn_return_any and cast all no-any-return sites

2026-06-12 18:21:22 -04:00

offload.py

feat(1.1): supervise cpu group with ProcessPoolExecutor kernel offload

2026-06-17 17:35:42 -04:00

os_fingerprint.py

fix(os-fingerprint): Win timestamps ON + windows_server profile + OS_MANGLE schema

2026-06-19 21:32:43 -04:00

paths.py

refactor: consolidate writable-dir probe into decnet/paths.py

2026-06-18 21:27:36 -04:00

prefork.py

feat(1.2): prefork supervisor primitive + tests (C, CoW gate passed)

2026-06-18 19:24:15 -04:00

privdrop.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

supervisor.py

feat(1.1): in-process worker supervision primitive (C5)

2026-06-17 16:48:32 -04:00

telemetry.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00