anti f715ac6bcd feat(cloak): egress SYN-ACK mangler + T2/T3 probe-response synthesizer ...

In-decky-netns NFQUEUE rewriter (window/option-order/IP-ID) and raw-socket
synthesizer for nmap probes Linux drops but the target OS answers (T2/T3),
driven by os_fingerprint.OS_MANGLE. Packet-shaping logic is pure and unit-tested
offline; scapy/netfilterqueue import lazily in the runtime loops. Entry:
python -m decnet.cloak (run by the base container; CAP_NET_ADMIN).

2026-06-19 21:32:50 -04:00

..

agent

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

api

feat(web): DELETE /deckies/{name} single-decky teardown endpoint

2026-06-16 12:07:10 -04:00

artifacts

refactor(artifacts): extract shard-finder out of transcripts router

2026-05-08 18:49:11 -04:00

asn

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

bus

fix(core): close HIGH ASVS findings V7.1.1 and correctness bugs BUG-1..6

2026-06-09 23:12:49 -04:00

canary

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

cli

feat(1.2): decnet fleet — prefork master for the heavy worker tier

2026-06-18 19:32:27 -04:00

cloak

feat(cloak): egress SYN-ACK mangler + T2/T3 probe-response synthesizer

2026-06-19 21:32:50 -04:00

clustering

feat(clustering): link identities by keystroke-rhythm proximity

2026-06-16 17:09:42 -04:00

collector

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

config

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

core

fix(os-fingerprint): Win timestamps ON + windows_server profile + OS_MANGLE schema

2026-06-19 21:32:43 -04:00

correlation

fix(security): close MEDIUM ASVS findings — JWT pinning, SSE tickets, SSRF, mTLS pin, rate limits + correctness bugs

2026-06-10 12:32:15 -04:00

db

feat(clustering): roll session digraph SimHashes into identity centroid

2026-06-16 17:05:34 -04:00

decky_io

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

deploy

chore(1.2): remove per-worker unit templates superseded by consolidation

2026-06-18 19:43:10 -04:00

docker

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

engine

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

factories

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

fixtures/campaigns

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

fleet

fix(tests): drop illegal @pytest.mark.anyio on anyio_backend fixture

2026-06-17 13:22:35 -04:00

geoip

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

intel

fix(security): close LOW ASVS findings — env bypass, SSE/deployment authz, CN fail-close, password byte-limit, exception leaks, BUG-12..16

2026-06-10 13:27:14 -04:00

lifecycle

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

live

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

logging

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

mutator

feat(mazenet): topology editor updates; refine mutator ops materialisation

2026-06-16 18:55:20 -04:00

orchestrator

fix(security): close MEDIUM ASVS findings — JWT pinning, SSE tickets, SSRF, mTLS pin, rate limits + correctness bugs

2026-06-10 12:32:15 -04:00

perf

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

prober

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

profiler

feat(profiler): extract motor.digraph_simhash keystroke biometric

2026-06-16 16:59:57 -04:00

realism

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

rpki

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

service_testing

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

services

feat(pro): add pro CLI/daemon extension surface

2026-06-17 15:21:06 -04:00

sniffer

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

stress

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

swarm

fix(security): close INFO ASVS findings — secret echo, TLS floor, mandatory tarball SHA, CORS/Content-Type guards, BUG-17

2026-06-10 13:50:06 -04:00

telemetry

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

topology

fix(topology): anchor compose path to run dir, stop install-dir litter

2026-06-18 21:24:00 -04:00

ttp

fix(1.2): relocate ATT&CK bundle to decnet/data/, bump 19.0 -> 19.1

2026-06-18 19:25:50 -04:00

updater

chore(security): pin TLSv1.2 floor on control-plane mTLS clients

2026-06-12 19:06:50 -04:00

util

feat(profiler): extract motor.digraph_simhash keystroke biometric

2026-06-16 16:59:57 -04:00

vectorstore

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

web

fix(1.2): relocate ATT&CK bundle to decnet/data/, bump 19.0 -> 19.1

2026-06-18 19:25:50 -04:00

webhook

fix(security): close MEDIUM ASVS findings — JWT pinning, SSE tickets, SSRF, mTLS pin, rate limits + correctness bugs

2026-06-10 12:32:15 -04:00

__init__.py

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

conftest.py

fix(security): close LOW ASVS findings — env bypass, SSE/deployment authz, CN fail-close, password byte-limit, exception leaks, BUG-12..16

2026-06-10 13:27:14 -04:00

mysql_spinup.sh

chore: relicense to AGPL-3.0-or-later and add SPDX headers

2026-05-22 21:04:16 -04:00

prefork_driver.py

feat(1.2): prefork supervisor primitive + tests (C, CoW gate passed)

2026-06-18 19:24:15 -04:00

test_offload.py

feat(1.1): supervise cpu group with ProcessPoolExecutor kernel offload

2026-06-17 17:35:42 -04:00

test_paths.py

refactor: consolidate writable-dir probe into decnet/paths.py

2026-06-18 21:27:36 -04:00

test_prefork.py

feat(1.2): prefork supervisor primitive + tests (C, CoW gate passed)

2026-06-18 19:24:15 -04:00

test_supervisor.py

feat(1.1): in-process worker supervision primitive (C5)

2026-06-17 16:48:32 -04:00