Commit Graph

  • 4f12e344a8 xss fixes from audit: main m17hr1l 2026-06-07 14:23:55 +02:00
  • 00cd8ca252 db: NullPool + WAL + busy_timeout — fixes QueuePool exhaustion under federation+classify load m17hr1l 2026-06-07 11:57:07 +02:00
  • 77e4cb6ab9 deploy-all: redirect deploy.sh stdin from /dev/null so loop doesn't drop hosts m17hr1l 2026-06-07 02:06:45 +02:00
  • 9ba4cd2189 merge topology: per-peer container view in federation network detail panel m17hr1l 2026-06-07 01:59:23 +02:00
  • 155d6eaaf9 stage-topo-d topology-export: CLI fed-topology + SW v10 m17hr1l 2026-06-07 01:58:27 +02:00
  • d998be276b stage-topo-c topology-export: federation network panel renders peer containers m17hr1l 2026-06-07 01:57:29 +02:00
  • 367f17a013 stage-topo-b topology-export: /federation/topology endpoint + CORS cache m17hr1l 2026-06-07 01:56:09 +02:00
  • a8216d00ef stage-topo-a topology-export: sanitized public docker snapshot module + tests m17hr1l 2026-06-07 01:55:49 +02:00
  • 8587e079bb federation/network: fetch peer's own /federation/explore/data on click + render their self-view inline (their peers, vouches in/out, transitive, translog head) m17hr1l 2026-06-07 01:21:50 +02:00
  • cef3bcb1ed merge explore: public transparent federation explorer with cross-jump m17hr1l 2026-06-07 01:19:56 +02:00
  • 9ab3271bc8 stage-exp-f explore: tests m17hr1l 2026-06-07 01:17:11 +02:00
  • c2bd68e246 stage-exp-e explore: link from home + info endpoint m17hr1l 2026-06-07 01:16:32 +02:00
  • 587fd07d38 stage-exp-d explore: JS — cross-jump navigation + verify button m17hr1l 2026-06-07 01:16:02 +02:00
  • ca6ba83950 stage-exp-c explore: HTML template + landing layout m17hr1l 2026-06-07 01:13:51 +02:00
  • a10203d8f1 stage-exp-b explore: public routes + CORS on existing public endpoints m17hr1l 2026-06-07 01:12:25 +02:00
  • 56466c334d stage-exp-a explore: public payload builder + tests m17hr1l 2026-06-07 01:11:17 +02:00
  • 351e16c3ce inference: openai-compatible mode + bearer auth (for api.neuronetz.ai etc.) m17hr1l 2026-06-07 01:09:19 +02:00
  • 2c7f71eff8 deploy: scripts/deploy-all.sh + hosts.example for multi-node federation rollouts m17hr1l 2026-06-07 01:03:31 +02:00
  • 925bf76a0b merge network-detail: rich detail panel, corroboration edges, 24h timeline, search m17hr1l 2026-06-07 01:01:42 +02:00
  • 0d9baef4c8 stage-netd-f network detail: tests for admin enrichment (stats/corroboration/timeline) m17hr1l 2026-06-07 01:00:39 +02:00
  • 980cf74b76 stage-netd-d cockpit SW: bump CACHE_VERSION to psyc-v7 for network detail CSS+JS m17hr1l 2026-06-07 00:57:53 +02:00
  • 70b6af6a35 stage-netd-c network detail: rich detail panel + hover tooltips + search/intensity + timeline JS m17hr1l 2026-06-07 00:57:49 +02:00
  • 15749e050e stage-netd-b network detail: corroboration edges + timeline strip (CSS + template) m17hr1l 2026-06-07 00:57:44 +02:00
  • c6c5d3b2ea stage-netd-a network detail: enrich peer stats (signals/severity/vouches/quorum) m17hr1l 2026-06-07 00:52:41 +02:00
  • e33c5b41f5 merge network-view: federation graph per node with vouches + signal flow m17hr1l 2026-06-07 00:43:13 +02:00
  • 865be2e239 stage-net-f network view: tests m17hr1l 2026-06-07 00:42:11 +02:00
  • ff44e9e450 stage-net-e network view: CLI fed-network command m17hr1l 2026-06-07 00:40:43 +02:00
  • 5950d34deb stage-net-d network view: cockpit page + JS force-directed graph m17hr1l 2026-06-07 00:40:13 +02:00
  • 5ff6d80333 stage-net-c network view: transitive fetcher + admin data endpoint m17hr1l 2026-06-07 00:37:32 +02:00
  • 6dcaae39c3 stage-net-b network view: public endpoint + signed payload m17hr1l 2026-06-07 00:37:12 +02:00
  • fbad78a611 stage-net-a network view: data model + local view builder m17hr1l 2026-06-07 00:36:29 +02:00
  • 77533eccb1 ui: widen content to 1600px + force long URLs/hashes to wrap (fixes 4K/1920 overflow) m17hr1l 2026-06-06 21:29:16 +02:00
  • 3e737d61b3 stage-34 wire admin nav: federation hub links to discovery + SW v4 m17hr1l 2026-06-06 21:17:57 +02:00
  • a53aacfdd8 merge auto-response: severity/quorum/local-only gated execution m17hr1l 2026-06-06 21:17:20 +02:00
  • 53ba537ce8 merge vouching+translog: web-of-trust + signed merkle audit log m17hr1l 2026-06-06 21:15:11 +02:00
  • 726117b19b merge discovery: DNS-SD walker + public peers endpoint m17hr1l 2026-06-06 21:13:29 +02:00
  • c5472b3134 stage-auto-e pulse: tests for auto-response gating m17hr1l 2026-06-06 21:12:02 +02:00
  • f5ca928f92 stage-auto-d pulse: cockpit auto-response state panel + CLI m17hr1l 2026-06-06 21:11:52 +02:00
  • e66c3d3359 stage-auto-c pulse: respond runner with gates + auto-fire path m17hr1l 2026-06-06 21:11:39 +02:00
  • f4148d86a6 stage-vouch-e federation: tests for vouching + quorum gate m17hr1l 2026-06-06 21:11:18 +02:00
  • 0e56fa70af stage-vouch-d federation: cockpit pages + CLI + public endpoints m17hr1l 2026-06-06 21:11:03 +02:00
  • 31ec1557ec stage-auto-b pulse: pulse_audit table + history m17hr1l 2026-06-06 21:10:38 +02:00
  • eadd1aea3b stage-vouch-c federation: import gate + translog hook (stage-trans-b) m17hr1l 2026-06-06 21:10:36 +02:00
  • 234e6d98ba stage-vouch-b federation: vouch sign/verify + quorum API m17hr1l 2026-06-06 21:10:03 +02:00
  • 0dbeb056c5 stage-auto-a pulse: respond config (threshold/quorum/local-only) m17hr1l 2026-06-06 21:09:46 +02:00
  • 7a510c7acf stage-trans-a translog: append-only signed merkle chain + tests m17hr1l 2026-06-06 21:09:32 +02:00
  • 4a9f6ceb7f stage-vouch-a federation: vouches table + DB helpers m17hr1l 2026-06-06 21:09:25 +02:00
  • ff88aba569 stage-disc-e discovery: tests m17hr1l 2026-06-06 21:08:15 +02:00
  • 9b49f768ca stage-disc-d discovery: cockpit + CLI m17hr1l 2026-06-06 21:06:39 +02:00
  • ddb40ff92c stage-disc-c discovery: pulse pipeline wiring + seeds settings m17hr1l 2026-06-06 21:04:54 +02:00
  • 6241a21af5 stage-disc-b discovery: peer walker (BFS) m17hr1l 2026-06-06 21:04:17 +02:00
  • de6204819b stage-disc-a discovery: dnssd resolver + public peers endpoint m17hr1l 2026-06-06 21:03:33 +02:00
  • 1675a2326e stage-33 wire pulse + federation: cockpit routes, CLI, nav links, SW bump m17hr1l 2026-06-06 16:15:48 +02:00
  • de5ff09815 merge federation: ed25519 identity + signed feeds m17hr1l 2026-06-06 16:13:36 +02:00
  • 02ce6d791c merge pulse: scheduler line + autonomy dial m17hr1l 2026-06-06 16:11:17 +02:00
  • d4229dd264 stage-fed-g federation: tests m17hr1l 2026-06-06 16:10:31 +02:00
  • 2ef0448165 stage-fed-f federation: CLI commands m17hr1l 2026-06-06 16:10:26 +02:00
  • 17b94acf6b stage-fed-e federation: cockpit admin page + public feed routes m17hr1l 2026-06-06 16:10:19 +02:00
  • 55ffd9da3d stage-fed-d federation: signed feed export + verified import m17hr1l 2026-06-06 16:09:53 +02:00
  • 63e3ff2777 stage-fed-c federation: db tables for peers + signal buffer m17hr1l 2026-06-06 16:08:36 +02:00
  • 50158f7fa8 stage-fed-b federation: dns record format m17hr1l 2026-06-06 16:08:31 +02:00
  • 4c35aad2bb stage-fed-a federation: ed25519 keypair + fingerprint m17hr1l 2026-06-06 16:08:03 +02:00
  • a7c59c9faa stage-33e pulse: tests m17hr1l 2026-06-06 16:06:54 +02:00
  • e071f289f2 stage-33d pulse: CLI commands m17hr1l 2026-06-06 16:05:14 +02:00
  • 26fbe08b65 stage-33c pulse: admin cockpit page m17hr1l 2026-06-06 16:04:39 +02:00
  • 4d67605371 stage-33b pulse: db tables + persistence m17hr1l 2026-06-06 16:03:30 +02:00
  • e710be6ebd stage-33a pulse: scheduler module with pipeline registry m17hr1l 2026-06-06 16:03:22 +02:00
  • 6356c5535b stage-32: add Umami analytics tracking script in base.html m17hr1l 2026-05-25 20:09:54 +02:00
  • 43c7c199c3 stage-31 polish: featured hero — particles sync with sweep, stat chips, radar emblem m17hr1l 2026-05-25 19:38:31 +02:00
  • 977c3670f3 stage-31 polish: featured hero — full-bleed animated grid cycling colors m17hr1l 2026-05-25 19:32:27 +02:00
  • 3f1f7cc420 stage-31 polish: featured-threat banner — uniform tint, full width m17hr1l 2026-05-25 19:28:26 +02:00
  • 04e0d3323f stage-31 fix: featured card — display:block on the new <a> wrapper m17hr1l 2026-05-25 19:15:48 +02:00
  • 5cf7cb5655 stage-31 polish: featured banner header + clickable news cards w/ hover m17hr1l 2026-05-25 19:12:55 +02:00
  • f51e672ad3 stage-31 fix: home page 500 — replace bad jinja sum with precomputed count m17hr1l 2026-05-25 19:05:25 +02:00
  • 76a0b0b636 stage-31: Newsline polish — featured case, time buckets, severity accents, generated visuals m17hr1l 2026-05-25 19:02:22 +02:00
  • 4d36db90f1 stage-30 fix: SW cache strategy — bump version + stale-while-revalidate m17hr1l 2026-05-25 17:36:08 +02:00
  • 88e4fb1dcd stage-30 fix: proper responsive nav (hamburger drawer) + cases-pipeline fix m17hr1l 2026-05-25 17:27:11 +02:00
  • 16cf873044 stage-30: home page (Newsline digest) + PWA + mobile pass m17hr1l 2026-05-25 17:18:40 +02:00
  • 7a57a7390a stage-29 fix: inference service — wire build: directive in compose m17hr1l 2026-05-25 17:08:50 +02:00
  • d7999150b3 stage-29: fetch-all resilience + Mozilla-compatible UA for CISA m17hr1l 2026-05-25 16:56:27 +02:00
  • fad7ad0d49 stage-28: make the proxy docker network name configurable per environment m17hr1l 2026-05-25 16:45:47 +02:00
  • 92f754e012 stage-28: wire LETSENCRYPT_HOST + LETSENCRYPT_EMAIL on the cockpit service m17hr1l 2026-05-25 16:42:46 +02:00
  • 9c3447723a stage-28 fix: deploy.sh — auto-trust Gitea host (TOFU), never touch identity keys m17hr1l 2026-05-25 16:36:18 +02:00
  • 9edd56e28b stage-28 fix: deploy.sh — read-only SSH preflight, no key/known_hosts edits m17hr1l 2026-05-25 15:39:06 +02:00
  • 2c2ead6149 stage-28 fix: deploy.sh pre-trusts the Gitea SSH host key (first-clone) m17hr1l 2026-05-25 15:32:44 +02:00
  • 61b7b8ef20 stage-28: deploy.sh — idempotent remote deploy + health probe m17hr1l 2026-05-25 14:51:47 +02:00
  • 494755ec4f stage-26d: click any topology node → structured spec panel below m17hr1l 2026-05-25 12:25:15 +02:00
  • ef88cd9d5d stage-26c: topology layout views, traffic flow, full-width page m17hr1l 2026-05-25 12:20:18 +02:00
  • b51a88d502 stage-26b: Docker topology in /admin — read-only socket-proxy + graph m17hr1l 2026-05-23 03:08:39 +02:00
  • eaca27be26 stage-27 polish: admin presence announces itself in the topbar m17hr1l 2026-05-23 01:14:58 +02:00
  • cb7bef4e40 stage-27: per-member TOTP enrollment + individual revocation m17hr1l 2026-05-23 00:46:45 +02:00
  • 4a832964a3 stage-26 polish: restyle the /admin gate as a secure console m17hr1l 2026-05-23 00:38:47 +02:00
  • abdf5e7747 stage-26: hidden /admin gated by TOTP (authenticator-app 2FA) m17hr1l 2026-05-23 00:35:02 +02:00
  • 73a932d8be stage-25: response actions — human-gated enforcement + the disco m17hr1l 2026-05-23 00:24:31 +02:00
  • d0a71d0226 stage-24: indicator lookup page + blocklist download in cockpit m17hr1l 2026-05-22 23:55:50 +02:00
  • 9a2a31ec9a stage-23: IOC index + lookup — the actionable keystone m17hr1l 2026-05-22 23:39:05 +02:00
  • f88db2fdf7 stage-22: cockpit reflects the live adapter + all six feeds m17hr1l 2026-05-22 23:33:19 +02:00
  • ee387abcd4 stage-21: swap inference server to psyc-v5 adapter m17hr1l 2026-05-20 23:55:47 +02:00
  • 376c5b6f4a stage-19-fix2: OTX — narrow by modified_since, longer timeout m17hr1l 2026-05-20 22:39:24 +02:00
  • f6fa52839f stage-20: defanging pipeline for IOC-extraction augmentation m17hr1l 2026-05-20 22:33:52 +02:00