← Branches
design-edge-request-protection
Commits
-
015096655
Merge remote-tracking branch 'origin/main' into design-edge-request-protection
claude agent, operated by paul@keymail.dev
-
9d29a4642
census: edge request records, approved by the census owner (census-ruling-edge-request-records)
claude agent, operated by paul@keymail.dev
-
be9a3119c
Merge remote-tracking branch 'origin/main' into design-edge-request-protection
claude agent, operated by paul@keymail.dev
-
7fdb1a832
reqrec: grouped hex and digit tokens are not lower-case words (re-review of e48b542f)
claude agent, operated by paul@keymail.dev
-
e48b542fa
reqrec: mask paths and query names by an allowlist of harmless segment shapes, input bounded to 2048 bytes (masking round, Paul's ruling)
claude agent, operated by paul@keymail.dev
-
09f6ae774
census: edge-refs route in the console route census; record-write inventory re-digests registerCLIRoutes for its one new route line
claude agent, operated by paul@keymail.dev
-
2713274d9
docs: spec §7 and plan record the final-review corrections
claude agent, operated by paul@keymail.dev
-
6b477073b
reqrec, console: 8-byte nonce (40-char codes), one canonical code for verify and lookup, record_status found/absent/unavailable (final review I5, I7, I8)
claude agent, operated by paul@keymail.dev
-
ed6815820
reqrec: bounded method vocabulary, separate block and watch caps, summaries through EdgeSummary, env and method counts, recorder-stamped time (final review C2, I3, I6, I9)
claude agent, operated by paul@keymail.dev
-
b7fd458b2
applog: edge records never evict app lines; blocks outlast requests and minute summaries outlast both; EdgeSummary bypasses the edge bucket (final review I2, I3)
claude agent, operated by paul@keymail.dev
-
82040d404
reqrec: mask long runs and slash-split base64, drop bare query components, escape controls (final review C1, I4)
claude agent, operated by paul@keymail.dev
-
7129128ef
host: request records e2e asserts the client hash and the /24, and that no whole address is stored
claude agent, operated by paul@keymail.dev
-
4aa577870
host: request records end-to-end through the real sink and recorder
claude agent, operated by paul@keymail.dev
-
0449605c3
console: explain an edge reference code from its seal and its record
claude agent, operated by paul@keymail.dev
-
6671ea399
host: wire edge request records to the log sink, flush minute counts
claude agent, operated by paul@keymail.dev
-
f021b0f41
edge: request records from the observer defer; activator marks the waking request
claude agent, operated by paul@keymail.dev
-
dd08d20cd
applog: Sink.Edge producer for edge request records, own rate budget
claude agent, operated by paul@keymail.dev
-
65359254d
reqrec: resolve the day salt outside the counter lock
claude agent, operated by paul@keymail.dev
-
04e702e74
reqrec: Recorder samples not-found and match records, counts per minute
claude agent, operated by paul@keymail.dev
-
6a4fcb12f
reqrec: self-describing, sealed reference codes
claude agent, operated by paul@keymail.dev
-
6f58b0a08
reqrec: mask compound tokens and UUIDs, strip Referer queries, widen secret names
claude agent, operated by paul@keymail.dev
-
afde4ae0f
reqrec: redaction and classification for edge request records
claude agent, operated by paul@keymail.dev
-
ccb7298d0
plans: edge protection plan 1, request records and reference codes
claude agent, operated by paul@keymail.dev
-
5a11c969b
spec: edge request protection approved
claude agent, operated by paul@keymail.dev
-
e044dff14
spec: edge request protection, ruling 9 (block on unknown routes)
claude agent, operated by paul@keymail.dev
-
d1c1acbbc
spec: edge request protection, settle builder-check questions 2-6
claude agent, operated by paul@keymail.dev
-
c5b8a1334
spec: edge request protection design, draft for builder check
claude agent, operated by paul@keymail.dev
amadan