Issues

Dependency Dashboard

#122

· vxfemboy opened

on Jul 29, 2026

Deferred: multi-queue throughput sharding (scale past one core)

#121

· vxfemboy opened

on Jul 28, 2026

Follow-up: extract peer_manager mod tests into peer_manager/tests.rs

#120

· vxfemboy opened

on Jul 26, 2026

test-hygiene: run-netns-roaming.sh lacks a positive witness; 7 tunnel_netns.rs wrappers are structurally dead

#110

· vxfemboy opened

on Jul 25, 2026

test/bench: the one real WAN benchmark is not reproducible from the repo — reconstruct + commit an automated harness

#109

· vxfemboy opened

on Jul 25, 2026

refactor(yipd): split peer_manager.rs into a module directory (keep the struct whole)

#108

· vxfemboy opened

on Jul 25, 2026

ci: quality gates exclude the control-plane core (coverage skips yipd; mutation only 3 logic crates); no perf-regression gate

#107

· vxfemboy opened

on Jul 25, 2026

security(mesh): verify_record and verify_cert derive their CA anchor from different operator inputs — under-documented fail-closed footgun

#106

· vxfemboy opened

on Jul 25, 2026

security(anti-dpi): data-plane obf key is not rotated per epoch — 2^32 obf-nonce birthday bound over the whole connection lifetime

#105

· vxfemboy opened

on Jul 25, 2026

security(handshake): #34 anti-replay baseline is in-memory only — a restarted responder accepts one stale Init and learns endpoint from it

#104

· vxfemboy opened

on Jul 25, 2026

security(rendezvous): registration is replayable after TTL lapse + reg_seq resets on restart — use a wall-clock/TAI64N seq

#103

· vxfemboy opened

on Jul 25, 2026

security(mesh): resolver probes the unauthenticated PeerInfo.reflexive while verifying+discarding the record's signed endpoints; PunchTo has no record gate

#102

· vxfemboy opened

on Jul 25, 2026

Navigation Menu

Uh oh!

Uh oh!

All issues

Dependency Dashboard

Deferred: multi-queue throughput sharding (scale past one core)

Follow-up: extract peer_manager mod tests into peer_manager/tests.rs

test-hygiene: run-netns-roaming.sh lacks a positive witness; 7 tunnel_netns.rs wrappers are structurally dead

test/bench: the one real WAN benchmark is not reproducible from the repo — reconstruct + commit an automated harness

refactor(yipd): split peer_manager.rs into a module directory (keep the struct whole)

ci: quality gates exclude the control-plane core (coverage skips yipd; mutation only 3 logic crates); no perf-regression gate

security(mesh): verify_record and verify_cert derive their CA anchor from different operator inputs — under-documented fail-closed footgun

security(anti-dpi): data-plane obf key is not rotated per epoch — 2^32 obf-nonce birthday bound over the whole connection lifetime

security(handshake): #34 anti-replay baseline is in-memory only — a restarted responder accepts one stale Init and learns endpoint from it

security(rendezvous): registration is replayable after TTL lapse + reg_seq resets on restart — use a wall-clock/TAI64N seq

security(mesh): resolver probes the unauthenticated PeerInfo.reflexive while verifying+discarding the record's signed endpoints; PunchTo has no record gate

Uh oh!

Uh oh!

Search results