2 releases, newest first.
v0.0.3
· main
· published 2 months ago
· by github-actions[bot]
v0.0.1
· main
· published 2 months ago
· by github-actions[bot]
Changelog
✨ Features
- plan: refuse an XML target whose XPath cannot be evaluated (5e0548d) (by Chris chrisbreuer93@gmail.com) (#28, #28)
- xml: add a hardened libxml2 adapter for XPath and schema validation (0f74d0f) (by Chris chrisbreuer93@gmail.com) (#28)
- engine: correlate transactions with W3C trace context (c2c7dd4) (by Chris chrisbreuer93@gmail.com) (#32)
- engine: emit debug records and attribute rule timing (60db487) (by Chris chrisbreuer93@gmail.com) (#32)
- engine: give SecDebugLog a sink, and make its settings readable (4029235) (by Chris chrisbreuer93@gmail.com) (#32)
- api: expose node identity operations and reject ambiguous routes (b18495f) (by Chris chrisbreuer93@gmail.com) (#49, #50)
- fleet: add node identity, certificate lifecycle, and replay prevention (e8f63c2) (by Chris chrisbreuer93@gmail.com) (#50, #43)
- api: describe every v1 request and response payload (5bd8acb) (by Chris chrisbreuer93@gmail.com) (#49)
- api: give v1 a shared error model and declared path parameters (27accc6) (by Chris chrisbreuer93@gmail.com) (#49)
- api: define the versioned control-plane API and its authorization (1dcc1fc) (by Chris chrisbreuer93@gmail.com) (#49, #58)
- perf: gate releases on request-path latency, throughput, and RSS (2dbfa72) (by Chris chrisbreuer93@gmail.com) (#40)
- compatibility: generate the per-item matrix from the engine registries (63f461c) (by Chris chrisbreuer93@gmail.com) (#2)
- ci: generate an SBOM and verify pins, secrets, and supply-chain hygiene (8866a69) (by Chris chrisbreuer93@gmail.com) (#5)
- cli: add format, replay, and benchmark subcommands (ff684ed) (by Chris chrisbreuer93@gmail.com) (#34)
- engine: expose request-path metrics for a Prometheus scrape (f06e2d1) (by Chris chrisbreuer93@gmail.com) (#32)
- audit: add a bounded delivery queue with retry and accounting (295f744) (by Chris chrisbreuer93@gmail.com) (#31)
- engine: let a host register body processors (d3d0b83) (by Chris chrisbreuer93@gmail.com) (#23, #27)
- engine: let a host register operator plugins (b370739) (by Chris chrisbreuer93@gmail.com) (#23, #21)
- engine: derive a safe filename from an uploaded part (1cf7758) (by Chris chrisbreuer93@gmail.com) (#26)
- engine: report multipart anomalies as MULTIPART_* flags (72da49c) (by Chris chrisbreuer93@gmail.com) (#26)
- engine: provide a file-backed sink for body and upload spooling (d59a0d9) (by Chris chrisbreuer93@gmail.com) (#25)
- engine: raise URLENCODED_ERROR on a malformed percent-escape (3b4147e) (by Chris chrisbreuer93@gmail.com) (#24)
- engine: implement @verifyCC, @verifyCPF, and @verifySSN (c872c99) (by Chris chrisbreuer93@gmail.com) (#21)
- engine: capture libinjection's SQLi fingerprint into TX.0 (8a86d73) (by Chris chrisbreuer93@gmail.com) (#20)
- engine: resolve @pmFromDataset and @ipMatchFromDataset (f958fc6) (by Chris chrisbreuer93@gmail.com) (#19)
- seclang: lex Coraza multi-line backtick blocks (d11a1bd) (by Chris chrisbreuer93@gmail.com) (#19)
- pg: add alert thresholds, silences, retry accounting, and fleet metrics (fa39c6a) (by Chris chrisbreuer93@gmail.com) (#59)
- sqlite: mirror the ruleset and rollout contracts (91bb0c3) (by Chris chrisbreuer93@gmail.com) (#57)
- pg: add cursor pagination, saved searches, and capacity forecasting (ae57bb4) (by Chris chrisbreuer93@gmail.com) (#56)
- pg: verify OIDC ID tokens for console login (df169a2) (by Chris chrisbreuer93@gmail.com) (#58)
- pg: implement local authentication, RBAC, API tokens, and sessions (aa5b345) (by Chris chrisbreuer93@gmail.com) (#58)
- pg: add the administration schema and match index types to queries (7b6e8e1) (by Chris chrisbreuer93@gmail.com) (#52)
- pg: retry a statement across a severed connection (623471c) (by Chris chrisbreuer93@gmail.com) (#53)
- pg: budget API, rollout, and ingestion connections separately (f048257) (by Chris chrisbreuer93@gmail.com) (#53)
- pg: add prepared statements, statement timeouts, and cancellation (22a1dc1) (by Chris chrisbreuer93@gmail.com) (#53)
- pg: gate a widening rollout on canary health (9a8722f) (by Chris chrisbreuer93@gmail.com) (#54)
- pg: detect nodes that have drifted from their assigned ruleset (e59b551) (by Chris chrisbreuer93@gmail.com) (#54)
- pg: sign policy bundles with Ed25519 instead of HMAC (3bf0978) (by Chris chrisbreuer93@gmail.com) (#54)
- pg: let a full event queue shed its oldest events (0f4c20b) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: compress the durable event queue with Zstandard (d01333e) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: add a bounded Zstandard wrapper (d12212c) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: carry idempotency keys through the event spool (2bf2a2a) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: ingest event batches with COPY (0243452) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: reconnect and retry an event drain after the server drops it (107ed79) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: deduplicate re-ingested events by idempotency key (f88388c) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: sign and verify policy bundles with HMAC-SHA256 (4c65cee) (by Chris chrisbreuer93@gmail.com) (#54, #54)
- pg: export a node's events as RFC 4180 CSV (d4e0885) (by Chris chrisbreuer93@gmail.com) (#56, #56)
- pg: sign alert webhooks with per-rule HMAC-SHA256 secrets (0d47a24) (by Chris chrisbreuer93@gmail.com) (#59, #59)
- sqlite: add SQLite demo/test fleet repositories (1082487) (by Chris chrisbreuer93@gmail.com) (#57, #57)
- sqlite: add an embedded SQLite client and migration runner (855384e) (by Chris chrisbreuer93@gmail.com) (#57, #57)
- pg: partition the security-event stream by month (8fb630b) (by Chris chrisbreuer93@gmail.com) (#56)
- pg: log alert webhook delivery outcomes (94abd13) (by Chris chrisbreuer93@gmail.com) (#59)
- pg: bind nullable parameters as SQL NULL (3e9a470) (by Chris chrisbreuer93@gmail.com) (#52)
- pg: roll out ruleset versions to a labeled node cohort (b5b2797) (by Chris chrisbreuer93@gmail.com) (#54)
- pg: segment the fleet by node labels (3681484) (by Chris chrisbreuer93@gmail.com) (#50)
- pg: track per-node ruleset rollout assignments (fa2d79b) (by Chris chrisbreuer93@gmail.com) (#54)
- pg: snapshot the event spool to disk for crash durability (fa1cc62) (by Chris chrisbreuer93@gmail.com) (#55)
- pg: add alert rules and webhook delivery targets (e24dd37) (by Chris chrisbreuer93@gmail.com) (#59)
- pg: add a bounded in-memory event spool with batched drain (5be7a47) (by Chris chrisbreuer93@gmail.com) (#55, #55)
- pg: add atomic batched event ingestion (2dbbdd9) (by Chris chrisbreuer93@gmail.com) (#55, #55)
- pg: add node inventory and staleness counts (62f3981) (by Chris chrisbreuer93@gmail.com) (#50, #50, #59, #59)
- pg: add multi-row queries and event search (7cf322c) (by Chris chrisbreuer93@gmail.com) (#56, #56, #66, #66)
- pg: add a bounded, reusing connection pool (bbc7f58) (by Chris chrisbreuer93@gmail.com) (#53, #53)
- pg: add event retention pruning (9b6cc0b) (by Chris chrisbreuer93@gmail.com) (#56, #56)
- pg: add a ruleset repository for versioned policy bundles (ac1dc07) (by Chris chrisbreuer93@gmail.com) (#54, #54)
- pg: add node and event repositories with bound parameters (d0a1819) (by Chris chrisbreuer93@gmail.com) (#53, #53, #50, #55, #50, #55)
- pg: add the initial fleet schema migration (503f91c) (by Chris chrisbreuer93@gmail.com) (#52, #52, #50, #55)
- pg: add a libpq client and transactional migration runner (bf0d107) (by Chris chrisbreuer93@gmail.com) (#52, #52, #53, #53)
- abi: resolve @pmFromFile data files via a data directory (c5c4796) (by Chris chrisbreuer93@gmail.com) (#19, #33, #38)
- audit: honor SecAuditLogFormat for the audit-log serializer (73075f8) (by Chris chrisbreuer93@gmail.com) (#30)
- operators: add @unconditionalMatch and @noMatch (7d8a709) (by Chris chrisbreuer93@gmail.com) (#18)
- cli: simulate a backend response for response-phase rules (2a6981e) (by Chris chrisbreuer93@gmail.com) (#38)
- engine: load @pmFromFile and @ipMatchFromFile data files (9011d04) (by Chris chrisbreuer93@gmail.com) (#19, #38)
- cli: let
test send a request body for body-phase rules (5581b28) (by Chris chrisbreuer93@gmail.com) (#38) - engine: populate TX.0..TX.N from regex captures (01bc20b) (by Chris chrisbreuer93@gmail.com) (#18)
- abi: load a rule set over the C ABI with create_with_rules (873d9a7) (by Chris chrisbreuer93@gmail.com) (#33)
- cli: add a test subcommand that runs a request through the engine (9f1d471) (by Chris chrisbreuer93@gmail.com) (#34)
- engine: resolve regex key selectors in rule targets (61a639b) (by Chris chrisbreuer93@gmail.com) (#18)
- engine: evaluate multiMatch rules against every transformation stage (bda6309) (by Chris chrisbreuer93@gmail.com) (#16, #18)
- engine: macro-expand operator arguments during rule evaluation (9167fdd) (by Chris chrisbreuer93@gmail.com) (#18)
- abi: expose evaluate_phase over the C connector ABI (12b1798) (by Chris chrisbreuer93@gmail.com) (#18, #33)
- engine: autonomously evaluate a phase's rule set (430b24f) (by Chris chrisbreuer93@gmail.com) (#18)
- engine: evaluate a rule end to end (targets, transforms, operator) (48c83ef) (by Chris chrisbreuer93@gmail.com) (#18)
- engine: resolve rule targets to their values (2628dc0) (by Chris chrisbreuer93@gmail.com) (#18)
- engine: add RuntimeOperator for compile-once operator evaluation (2aa9d59) (by Chris chrisbreuer93@gmail.com) (#18)
- engine: add the operator-evaluation leaf of rule execution (e08301f) (by Chris chrisbreuer93@gmail.com) (#18)
- cli: add an explain subcommand listing compiled rules (cd19f01) (by Chris chrisbreuer93@gmail.com) (#34)
- cli: add a validate subcommand for SecLang configs (0274ea7) (by Chris chrisbreuer93@gmail.com) (#34)
- abi: export audit-log serialization over the C connector ABI (ede17af) (by Chris chrisbreuer93@gmail.com) (#33)
- rules: implement the sanitizeMatched action (ba05ace) (by Chris chrisbreuer93@gmail.com) (#32)
- rules: mask sanitizeArg values in the audited request body (bac2d47) (by Chris chrisbreuer93@gmail.com) (#32)
- rules: wire sanitizeRequestHeader/sanitizeResponseHeader actions (27b9752) (by Chris chrisbreuer93@gmail.com) (#32)
- engine: mask sanitised headers in the audit log (dfd1158) (by Chris chrisbreuer93@gmail.com) (#32)
- audit: produce ModSecurity concurrent-layout paths and index lines (e7c6fe1) (by Chris chrisbreuer93@gmail.com) (#31)
- audit: deliver audit records via serial and callback writers (a76f71a) (by Chris chrisbreuer93@gmail.com) (#31)
- engine: snapshot transactions into audit logs and serialize them (382bbab) (by Chris chrisbreuer93@gmail.com) (#30)
- audit: serialize the OCSF audit-log format (722ea82) (by Chris chrisbreuer93@gmail.com) (#30)
- audit: serialize the legacy JSON audit-log format (09e0a00) (by Chris chrisbreuer93@gmail.com) (#30)
- audit: serialize the structured JSON audit-log format (f1da3f7) (by Chris chrisbreuer93@gmail.com) (#30)
- audit: serialize the native serial audit-log format (4bd0a0b) (by Chris chrisbreuer93@gmail.com) (#30)
- engine: inspect XML request bodies via XML://@* and XML:/* (e889b17) (by Chris chrisbreuer93@gmail.com) (#27)
- engine: process multipart bodies into ARGS_POST and FILES (9d83b31) (by Chris chrisbreuer93@gmail.com) (#26)
- multipart: add a slice-based multipart/form-data reader (bf0d341) (by Chris chrisbreuer93@gmail.com) (#26)
- engine: flatten JSON response bodies into RESPONSE_ARGS (4218124) (by Chris chrisbreuer93@gmail.com) (#27, #29)
- engine: buffer the response body and expose RESPONSE_BODY (f219f78) (by Chris chrisbreuer93@gmail.com) (#29)
- engine: flatten JSON request bodies into ARGS_POST (160465c) (by Chris chrisbreuer93@gmail.com) (#27)
- engine: parse urlencoded request bodies into ARGS_POST (c95f6ea) (by Chris chrisbreuer93@gmail.com) (#27)
- engine: buffer the request body and expose REQUEST_BODY (d543152) (by Chris chrisbreuer93@gmail.com) (#25)
- request: bounded request-body buffering with spool sink (2553bd5) (by Chris chrisbreuer93@gmail.com) (#25)
- operators: wire @detectSQLi and @detectXSS via libinjection (38ecc78) (by Chris chrisbreuer93@gmail.com) (#20)
- operators: add validation operator inventory (ec8c27c) (by Chris chrisbreuer93@gmail.com) (#21)
- operators: implement byte-range, UTF-8, and URL-encoding validators (4579513) (by Chris chrisbreuer93@gmail.com) (#21)
- engine: auto-populate ARGS_GET and REQUEST_COOKIES from requests (210e634) (by Chris chrisbreuer93@gmail.com) (#24)
- request: parse query arguments and cookies with pinned decoding (31aee6b) (by Chris chrisbreuer93@gmail.com) (#24)
- operators: load @pmFromFile and @ipMatchFromFile with matcher inventory (f5f159a) (by Chris chrisbreuer93@gmail.com) (#19)
- operators: wire @pm and @ipMatch with corpus evidence (c3e3bbe) (by Chris chrisbreuer93@gmail.com) (#19)
- ip: add IPv4 and IPv6 CIDR matcher (6dcbee1) (by Chris chrisbreuer93@gmail.com) (#19)
- phrase: add ASCII case-insensitive Aho-Corasick matcher (b0a9479) (by Chris chrisbreuer93@gmail.com) (#19)
- operators: add bounded per-worker rx result memoization (ec8c02b) (by Chris chrisbreuer93@gmail.com) (#18)
- operators: implement rx, rxGlobal, and rsub regex operators (13b08f3) (by Chris chrisbreuer93@gmail.com) (#18)
- operators: implement numeric and string scalar operators (928cbab) (by Chris chrisbreuer93@gmail.com)
- engine: define transformation plugin boundary (090dc06) (by Chris chrisbreuer93@gmail.com)
- engine: cache bounded transformation pipelines (1cc784f) (by Chris chrisbreuer93@gmail.com)
- engine: bind compiled transformation pipelines (a855565) (by Chris chrisbreuer93@gmail.com)
- engine: execute bounded transformation pipelines (50fa5f3) (by Chris chrisbreuer93@gmail.com)
- engine: add compatibility digests (d944835) (by Chris chrisbreuer93@gmail.com)
- engine: normalize path segments (a525d21) (by Chris chrisbreuer93@gmail.com)
- engine: canonicalize command lines (5b78517) (by Chris chrisbreuer93@gmail.com)
- engine: implement comment transformations (27ee5c3) (by Chris chrisbreuer93@gmail.com)
- engine: encode profiled UTF-8 escapes (5638f2e) (by Chris chrisbreuer93@gmail.com)
- engine: decode profiled HTML entities (78691f3) (by Chris chrisbreuer93@gmail.com)
- engine: decode JavaScript escapes (ebef6e1) (by Chris chrisbreuer93@gmail.com)
- engine: decode C escape sequences (bca9377) (by Chris chrisbreuer93@gmail.com)
- engine: add profiled CSS decoding (33925fc) (by Chris chrisbreuer93@gmail.com)
- engine: add Unicode URL transformation (c0c9ca1) (by Chris chrisbreuer93@gmail.com)
- engine: add SQL hex transformation (ac2a44b) (by Chris chrisbreuer93@gmail.com)
- engine: add profiled Base64 transformations (18dcb2e) (by Chris chrisbreuer93@gmail.com)
- engine: add hex and URL transformations (8810a06) (by Chris chrisbreuer93@gmail.com)
- engine: add bounded transformation executor (01d6ef6) (by Chris chrisbreuer93@gmail.com)
- engine: type stable transformation inventory (4f67721) (by Chris chrisbreuer93@gmail.com)
- engine: support regex target exclusions (ba9c150) (by Chris chrisbreuer93@gmail.com)
- engine: gate proxy interventions by capability (329ecac) (by Chris chrisbreuer93@gmail.com)
- engine: apply runtime audit log parts (753d0cd) (by Chris chrisbreuer93@gmail.com)
- engine: stage exact target exclusions (4ba3fc5) (by Chris chrisbreuer93@gmail.com)
- engine: enforce runtime rule exclusions (70750ca) (by Chris chrisbreuer93@gmail.com)
- engine: apply transaction runtime controls (ec3bff3) (by Chris chrisbreuer93@gmail.com)
- engine: compile bounded runtime controls (16f6a85) (by Chris chrisbreuer93@gmail.com)
- engine: parse runtime control actions (3e86c4a) (by Chris chrisbreuer93@gmail.com)
- engine: resolve skip-after flow targets (b09eaaa) (by Chris chrisbreuer93@gmail.com)
- engine: traverse phases with flow decisions (4fe2b71) (by Chris chrisbreuer93@gmail.com)
- engine: commit disruptive match decisions (5ed37c9) (by Chris chrisbreuer93@gmail.com)
- engine: compile disruptive rule decisions (3b936ef) (by Chris chrisbreuer93@gmail.com)
- engine: parse disruptive action configuration (6d1c842) (by Chris chrisbreuer93@gmail.com)
- engine: commit complete rule chains atomically (6d0447b) (by Chris chrisbreuer93@gmail.com)
- engine: own bounded match event intent (398422a) (by Chris chrisbreuer93@gmail.com)
- engine: implement deterministic persistent decay (ffc4ccc) (by Chris chrisbreuer93@gmail.com)
- engine: apply persistent rule effects atomically (bc1cb1f) (by Chris chrisbreuer93@gmail.com)
- engine: stage checked persistent subtraction (54f62bb) (by Chris chrisbreuer93@gmail.com)
- engine: preflight scalar update batches (2485ba2) (by Chris chrisbreuer93@gmail.com)
- engine: checkpoint persistent effect sessions (ce5b5f1) (by Chris chrisbreuer93@gmail.com)
- engine: apply local rule effects atomically (2cdb4e5) (by Chris chrisbreuer93@gmail.com)
- engine: commit collection key groups atomically (1917147) (by Chris chrisbreuer93@gmail.com)
- engine: expand compiled effect macros (82d7c96) (by Chris chrisbreuer93@gmail.com)
- engine: resolve plan macro variables (d05aa4d) (by Chris chrisbreuer93@gmail.com)
- engine: project matched rule captures (5d7c63d) (by Chris chrisbreuer93@gmail.com)
- engine: replace transaction collections atomically (22a2493) (by Chris chrisbreuer93@gmail.com)
- engine: compile non-disruptive effect plans (114d111) (by Chris chrisbreuer93@gmail.com)
- engine: compile typed rule metadata (df78909) (by Chris chrisbreuer93@gmail.com)
- engine: parse non-disruptive action effects (b92cf83) (by Chris chrisbreuer93@gmail.com)
- seclang: assemble remote rules inline (419f7db) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: add bounded remote rule loader (ddaa19e) (by Chris chrisbreuer93@gmail.com) (#14, #43)
- seclang: enforce missing rule policy (3f0db0a) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: materialize rule action updates (ebfe534) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: materialize rule target updates (e2cfd15) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: resolve skip-after markers in plans (7c4a58c) (by Chris chrisbreuer93@gmail.com) (#14, #16)
- seclang: apply regex rule removals (319d12f) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: apply remove-by-id at compile time (790743d) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: compile bounded rule id selectors (a2fb7e2) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: scope default actions by phase (52bcd42) (by Chris chrisbreuer93@gmail.com) (#14)
- seclang: diagnose conflicting body limits (8ee46c3) (by Chris chrisbreuer93@gmail.com)
- seclang: validate directive paths URLs and lists (9c6f774) (by Chris chrisbreuer93@gmail.com)
- seclang: bound directive configuration resources (4a76324) (by Chris chrisbreuer93@gmail.com)
- seclang: expose upstream support states (82b1959) (by Chris chrisbreuer93@gmail.com)
- seclang: expose immutable typed configuration (91a86e4) (by Chris chrisbreuer93@gmail.com)
- seclang: validate directive schemas before publish (d44fbb1) (by Chris chrisbreuer93@gmail.com)
- seclang: add stable directive registry (598f8e5) (by Chris chrisbreuer93@gmail.com)
- engine: compile immutable macro programs (2275bb6) (by Chris chrisbreuer93@gmail.com)
- engine: bind plans to waf generations (3a6f51a) (by Chris chrisbreuer93@gmail.com)
- engine: share immutable plan generations (bea5061) (by Chris chrisbreuer93@gmail.com)
- engine: fingerprint compiled plans (35e4bd6) (by Chris chrisbreuer93@gmail.com)
- engine: index structural plan metadata (164a45c) (by Chris chrisbreuer93@gmail.com)
- engine: diagnose structural plan failures (507a925) (by Chris chrisbreuer93@gmail.com)
- engine: compile phases defaults and chains (dc794fe) (by Chris chrisbreuer93@gmail.com)
- engine: add immutable plan storage (77d514a) (by Chris chrisbreuer93@gmail.com)
- parser: expose owned parse APIs (75dcb46) (by Chris chrisbreuer93@gmail.com)
- parser: resolve confined include trees (d32ee1d) (by Chris chrisbreuer93@gmail.com)
- parser: return diagnosed parse outcomes (5017317) (by Chris chrisbreuer93@gmail.com)
- parser: add bounded diagnostics (1ad8bdc) (by Chris chrisbreuer93@gmail.com)
- parser: attach structured rule nodes (c6764d7) (by Chris chrisbreuer93@gmail.com)
- parser: structure SecRule syntax (7011016) (by Chris chrisbreuer93@gmail.com)
- parser: parse SecLang directive shapes (5599563) (by Chris chrisbreuer93@gmail.com)
- parser: tokenize quoted SecLang arguments (e881928) (by Chris chrisbreuer93@gmail.com)
- parser: normalize SecLang logical lines (99f99e4) (by Chris chrisbreuer93@gmail.com)
- parser: add owned SecLang sources (5509a5b) (by Chris chrisbreuer93@gmail.com)
- engine: discover persistence capabilities (0c7c533) (by Chris chrisbreuer93@gmail.com)
- engine: add LMDB persistence backend (bafdca1) (by Chris chrisbreuer93@gmail.com)
- engine: wire persistent collection actions (fc9e01a) (by Chris chrisbreuer93@gmail.com)
- engine: add persistent transaction sessions (fe8cd69) (by Chris chrisbreuer93@gmail.com)
- engine: add revisioned persistence backend (011776f) (by Chris chrisbreuer93@gmail.com)
- engine: publish derived collection families (531cc68) (by Chris chrisbreuer93@gmail.com)
- engine: compile regex collection selectors (b55f27c) (by Chris chrisbreuer93@gmail.com)
- engine: add collection target semantics (73d63a2) (by Chris chrisbreuer93@gmail.com)
- engine: wire transaction collections (2a0a66e) (by Chris chrisbreuer93@gmail.com)
- engine: compile bounded runtime macros (29e544d) (by Chris chrisbreuer93@gmail.com)
- engine: add bounded collection storage (b0ac68c) (by Chris chrisbreuer93@gmail.com)
- engine: populate scalar transaction state (45986e0) (by Chris chrisbreuer93@gmail.com)
- engine: define stable scalar variable union (ff5cbfa) (by Chris chrisbreuer93@gmail.com)
- engine: finalize five-phase lifecycle (ca95a8d) (by Chris chrisbreuer93@gmail.com)
- engine: add atomic generation reload (acc0147) (by Chris chrisbreuer93@gmail.com)
- engine: add bounded scalar variables (e5b98cb) (by Chris chrisbreuer93@gmail.com)
- publish initial versioned C connector ABI (aec23b4) (by Chris chrisbreuer93@gmail.com) (#3, #33)
- engine: integrate native SQLi operator (53afd60) (by Chris chrisbreuer93@gmail.com) (#20)
- engine: add bounded transaction lifecycle (f1e24b7) (by Chris chrisbreuer93@gmail.com) (#4, #7)
🐛 Bug Fixes
⚡ Performance Improvements
♻️ Code Refactoring
📝 Documentation
- update Discord community links (9a65459) (by Chris chrisbreuer93@gmail.com)
- describe what the engine reports about itself (7f35252) (by Chris chrisbreuer93@gmail.com) (#32)
- fleet: document node identity and the pg-test caching trap (831e1dd) (by Chris chrisbreuer93@gmail.com) (#50)
- pg: document the deployment profile and verified recovery drills (76e6e2c) (by Chris chrisbreuer93@gmail.com) (#51, #60)
- add Community section to README (fb0f01a) (by Chris chrisbreuer93@gmail.com)
- c-abi: document the ABI compatibility rules (355d978) (by Chris chrisbreuer93@gmail.com) (#33)
- compatibility: record the CLI as implemented (a56d93a) (by Chris chrisbreuer93@gmail.com) (#34)
- compatibility: record audit delivery as implemented (ae9357c) (by Chris chrisbreuer93@gmail.com) (#31)
- plugins: document the host extension contracts (3fca2f2) (by Chris chrisbreuer93@gmail.com) (#23)
- compatibility: record the streaming JSON body processor (ea6b247) (by Chris chrisbreuer93@gmail.com) (#27)
- compatibility: record request-body buffering as implemented (d3b0719) (by Chris chrisbreuer93@gmail.com) (#25)
- compatibility: record request parsing as implemented (7205e42) (by Chris chrisbreuer93@gmail.com) (#24)
- compatibility: record the fleet control plane in the feature matrix (2fb3e90) (by Chris chrisbreuer93@gmail.com) (#52, #51, #53, #54, #55, #56, #57, #58, #59, #2)
- pg: document identity, authorization, and OIDC verification (328ceef) (by Chris chrisbreuer93@gmail.com) (#58)
- pg: document the fleet control-plane storage layer (e0ccfb2) (by Chris chrisbreuer93@gmail.com) (#52, #53, #54, #55, #56, #57)
- engine: record the CLI test subcommand and C-ABI rule loading (1b39507) (by Chris chrisbreuer93@gmail.com) (#33, #34)
- engine: record the autonomous rule-execution engine in the matrix (5b6ccd5) (by Chris chrisbreuer93@gmail.com) (#18)
- engine: record the CLI and C-ABI audit export in the matrix (baaf1b9) (by Chris chrisbreuer93@gmail.com) (#33, #34, #33, #34)
- engine: record audit writers and sanitise redaction (b15d31e) (by Chris chrisbreuer93@gmail.com) (#31, #32)
- engine: record the audit-log format subsystem (57a2543) (by Chris chrisbreuer93@gmail.com) (#30)
- engine: record the XML body processor (c73fd39) (by Chris chrisbreuer93@gmail.com) (#27)
- engine: record the multipart body processor (f8ea5b2) (by Chris chrisbreuer93@gmail.com) (#26)
- engine: record the response JSON body processor in matrix and controls (8cbb7b0) (by Chris chrisbreuer93@gmail.com) (#27, #29)
- engine: document request-body buffering and processors (9dcd74a) (by Chris chrisbreuer93@gmail.com) (#25, #27)
- engine: record request-body buffering and processors in matrix (4c2ea5b) (by Chris chrisbreuer93@gmail.com) (#25, #27)
- operators: document validation operators and matrix (1958b78) (by Chris chrisbreuer93@gmail.com) (#21)
- engine: document request-parsing contracts and matrix (0e58ad7) (by Chris chrisbreuer93@gmail.com) (#24)
- operators: document phrase and IP matcher contracts (cb8ee66) (by Chris chrisbreuer93@gmail.com) (#19)
- operators: document operator contracts and compatibility matrix (094c460) (by Chris chrisbreuer93@gmail.com) (#18)
- engine: record transformation qualification evidence (0d56997) (by Chris chrisbreuer93@gmail.com)
- define transformation cache behavior (a0e93e0) (by Chris chrisbreuer93@gmail.com)
- define transformation security contracts (adbe9ac) (by Chris chrisbreuer93@gmail.com)
- verify disruptive flow controls (194ac92) (by Chris chrisbreuer93@gmail.com)
- record flow cursor qualification (b89262b) (by Chris chrisbreuer93@gmail.com)
- qualify regex runtime exclusions (197efcb) (by Chris chrisbreuer93@gmail.com)
- pin disruptive flow control evidence (344dc8c) (by Chris chrisbreuer93@gmail.com)
- record non-disruptive action qualification (28380d4) (by Chris chrisbreuer93@gmail.com)
- record rule configuration qualification (7d903f0) (by Chris chrisbreuer93@gmail.com)
- publish directive compatibility contract (46134e8) (by Chris chrisbreuer93@gmail.com)
- record hosted plan evidence (33825c6) (by Chris chrisbreuer93@gmail.com)
- publish structural plan contract (2290616) (by Chris chrisbreuer93@gmail.com)
- publish SecLang parser evidence (e72709c) (by Chris chrisbreuer93@gmail.com)
- publish persistent collection contracts (8df7ad1) (by Chris chrisbreuer93@gmail.com)
- define collection compatibility contracts (401ba73) (by Chris chrisbreuer93@gmail.com)
- specify scalar compatibility contracts (b59955e) (by Chris chrisbreuer93@gmail.com)
- define ownership and reload contracts (6903a93) (by Chris chrisbreuer93@gmail.com)
- add executable compatibility evidence matrix (09b5b96) (by Chris chrisbreuer93@gmail.com) (#2)
💄 Styles
✅ Tests
👷 Build System
💚 Continuous Integration
🔧 Chores
Contributors