-
4f12e344a8
xss fixes from audit:
main
m17hr1l
2026-06-07 14:23:55 +02:00
-
00cd8ca252
db: NullPool + WAL + busy_timeout — fixes QueuePool exhaustion under federation+classify load
m17hr1l
2026-06-07 11:57:07 +02:00
-
77e4cb6ab9
deploy-all: redirect deploy.sh stdin from /dev/null so loop doesn't drop hosts
m17hr1l
2026-06-07 02:06:45 +02:00
-
9ba4cd2189
merge topology: per-peer container view in federation network detail panel
m17hr1l
2026-06-07 01:59:23 +02:00
-
-
155d6eaaf9
stage-topo-d topology-export: CLI fed-topology + SW v10
m17hr1l
2026-06-07 01:58:27 +02:00
-
d998be276b
stage-topo-c topology-export: federation network panel renders peer containers
m17hr1l
2026-06-07 01:57:29 +02:00
-
367f17a013
stage-topo-b topology-export: /federation/topology endpoint + CORS cache
m17hr1l
2026-06-07 01:56:09 +02:00
-
a8216d00ef
stage-topo-a topology-export: sanitized public docker snapshot module + tests
m17hr1l
2026-06-07 01:55:49 +02:00
-
-
8587e079bb
federation/network: fetch peer's own /federation/explore/data on click + render their self-view inline (their peers, vouches in/out, transitive, translog head)
m17hr1l
2026-06-07 01:21:50 +02:00
-
cef3bcb1ed
merge explore: public transparent federation explorer with cross-jump
m17hr1l
2026-06-07 01:19:56 +02:00
-
-
9ab3271bc8
stage-exp-f explore: tests
m17hr1l
2026-06-07 01:17:11 +02:00
-
c2bd68e246
stage-exp-e explore: link from home + info endpoint
m17hr1l
2026-06-07 01:16:32 +02:00
-
587fd07d38
stage-exp-d explore: JS — cross-jump navigation + verify button
m17hr1l
2026-06-07 01:16:02 +02:00
-
ca6ba83950
stage-exp-c explore: HTML template + landing layout
m17hr1l
2026-06-07 01:13:51 +02:00
-
a10203d8f1
stage-exp-b explore: public routes + CORS on existing public endpoints
m17hr1l
2026-06-07 01:12:25 +02:00
-
56466c334d
stage-exp-a explore: public payload builder + tests
m17hr1l
2026-06-07 01:11:17 +02:00
-
351e16c3ce
inference: openai-compatible mode + bearer auth (for api.neuronetz.ai etc.)
m17hr1l
2026-06-07 01:09:19 +02:00
-
2c7f71eff8
deploy: scripts/deploy-all.sh + hosts.example for multi-node federation rollouts
m17hr1l
2026-06-07 01:03:31 +02:00
-
-
925bf76a0b
merge network-detail: rich detail panel, corroboration edges, 24h timeline, search
m17hr1l
2026-06-07 01:01:42 +02:00
-
-
0d9baef4c8
stage-netd-f network detail: tests for admin enrichment (stats/corroboration/timeline)
m17hr1l
2026-06-07 01:00:39 +02:00
-
980cf74b76
stage-netd-d cockpit SW: bump CACHE_VERSION to psyc-v7 for network detail CSS+JS
m17hr1l
2026-06-07 00:57:53 +02:00
-
70b6af6a35
stage-netd-c network detail: rich detail panel + hover tooltips + search/intensity + timeline JS
m17hr1l
2026-06-07 00:57:49 +02:00
-
15749e050e
stage-netd-b network detail: corroboration edges + timeline strip (CSS + template)
m17hr1l
2026-06-07 00:57:44 +02:00
-
c6c5d3b2ea
stage-netd-a network detail: enrich peer stats (signals/severity/vouches/quorum)
m17hr1l
2026-06-07 00:52:41 +02:00
-
-
e33c5b41f5
merge network-view: federation graph per node with vouches + signal flow
m17hr1l
2026-06-07 00:43:13 +02:00
-
-
865be2e239
stage-net-f network view: tests
m17hr1l
2026-06-07 00:42:11 +02:00
-
ff44e9e450
stage-net-e network view: CLI fed-network command
m17hr1l
2026-06-07 00:40:43 +02:00
-
5950d34deb
stage-net-d network view: cockpit page + JS force-directed graph
m17hr1l
2026-06-07 00:40:13 +02:00
-
5ff6d80333
stage-net-c network view: transitive fetcher + admin data endpoint
m17hr1l
2026-06-07 00:37:32 +02:00
-
6dcaae39c3
stage-net-b network view: public endpoint + signed payload
m17hr1l
2026-06-07 00:37:12 +02:00
-
fbad78a611
stage-net-a network view: data model + local view builder
m17hr1l
2026-06-07 00:36:29 +02:00
-
-
77533eccb1
ui: widen content to 1600px + force long URLs/hashes to wrap (fixes 4K/1920 overflow)
m17hr1l
2026-06-06 21:29:16 +02:00
-
3e737d61b3
stage-34 wire admin nav: federation hub links to discovery + SW v4
m17hr1l
2026-06-06 21:17:57 +02:00
-
a53aacfdd8
merge auto-response: severity/quorum/local-only gated execution
m17hr1l
2026-06-06 21:17:20 +02:00
-
-
53ba537ce8
merge vouching+translog: web-of-trust + signed merkle audit log
m17hr1l
2026-06-06 21:15:11 +02:00
-
-
726117b19b
merge discovery: DNS-SD walker + public peers endpoint
m17hr1l
2026-06-06 21:13:29 +02:00
-
-
c5472b3134
stage-auto-e pulse: tests for auto-response gating
m17hr1l
2026-06-06 21:12:02 +02:00
-
f5ca928f92
stage-auto-d pulse: cockpit auto-response state panel + CLI
m17hr1l
2026-06-06 21:11:52 +02:00
-
e66c3d3359
stage-auto-c pulse: respond runner with gates + auto-fire path
m17hr1l
2026-06-06 21:11:39 +02:00
-
f4148d86a6
stage-vouch-e federation: tests for vouching + quorum gate
m17hr1l
2026-06-06 21:11:18 +02:00
-
0e56fa70af
stage-vouch-d federation: cockpit pages + CLI + public endpoints
m17hr1l
2026-06-06 21:11:03 +02:00
-
31ec1557ec
stage-auto-b pulse: pulse_audit table + history
m17hr1l
2026-06-06 21:10:38 +02:00
-
eadd1aea3b
stage-vouch-c federation: import gate + translog hook (stage-trans-b)
m17hr1l
2026-06-06 21:10:36 +02:00
-
234e6d98ba
stage-vouch-b federation: vouch sign/verify + quorum API
m17hr1l
2026-06-06 21:10:03 +02:00
-
0dbeb056c5
stage-auto-a pulse: respond config (threshold/quorum/local-only)
m17hr1l
2026-06-06 21:09:46 +02:00
-
-
-
7a510c7acf
stage-trans-a translog: append-only signed merkle chain + tests
m17hr1l
2026-06-06 21:09:32 +02:00
-
4a9f6ceb7f
stage-vouch-a federation: vouches table + DB helpers
m17hr1l
2026-06-06 21:09:25 +02:00
-
-
-
ff88aba569
stage-disc-e discovery: tests
m17hr1l
2026-06-06 21:08:15 +02:00
-
9b49f768ca
stage-disc-d discovery: cockpit + CLI
m17hr1l
2026-06-06 21:06:39 +02:00
-
ddb40ff92c
stage-disc-c discovery: pulse pipeline wiring + seeds settings
m17hr1l
2026-06-06 21:04:54 +02:00
-
6241a21af5
stage-disc-b discovery: peer walker (BFS)
m17hr1l
2026-06-06 21:04:17 +02:00
-
de6204819b
stage-disc-a discovery: dnssd resolver + public peers endpoint
m17hr1l
2026-06-06 21:03:33 +02:00
-
-
1675a2326e
stage-33 wire pulse + federation: cockpit routes, CLI, nav links, SW bump
m17hr1l
2026-06-06 16:15:48 +02:00
-
de5ff09815
merge federation: ed25519 identity + signed feeds
m17hr1l
2026-06-06 16:13:36 +02:00
-
-
02ce6d791c
merge pulse: scheduler line + autonomy dial
m17hr1l
2026-06-06 16:11:17 +02:00
-
-
d4229dd264
stage-fed-g federation: tests
m17hr1l
2026-06-06 16:10:31 +02:00
-
2ef0448165
stage-fed-f federation: CLI commands
m17hr1l
2026-06-06 16:10:26 +02:00
-
17b94acf6b
stage-fed-e federation: cockpit admin page + public feed routes
m17hr1l
2026-06-06 16:10:19 +02:00
-
55ffd9da3d
stage-fed-d federation: signed feed export + verified import
m17hr1l
2026-06-06 16:09:53 +02:00
-
63e3ff2777
stage-fed-c federation: db tables for peers + signal buffer
m17hr1l
2026-06-06 16:08:36 +02:00
-
50158f7fa8
stage-fed-b federation: dns record format
m17hr1l
2026-06-06 16:08:31 +02:00
-
4c35aad2bb
stage-fed-a federation: ed25519 keypair + fingerprint
m17hr1l
2026-06-06 16:08:03 +02:00
-
-
-
a7c59c9faa
stage-33e pulse: tests
m17hr1l
2026-06-06 16:06:54 +02:00
-
e071f289f2
stage-33d pulse: CLI commands
m17hr1l
2026-06-06 16:05:14 +02:00
-
26fbe08b65
stage-33c pulse: admin cockpit page
m17hr1l
2026-06-06 16:04:39 +02:00
-
4d67605371
stage-33b pulse: db tables + persistence
m17hr1l
2026-06-06 16:03:30 +02:00
-
e710be6ebd
stage-33a pulse: scheduler module with pipeline registry
m17hr1l
2026-06-06 16:03:22 +02:00
-
-
6356c5535b
stage-32: add Umami analytics tracking script in base.html
m17hr1l
2026-05-25 20:09:54 +02:00
-
43c7c199c3
stage-31 polish: featured hero — particles sync with sweep, stat chips, radar emblem
m17hr1l
2026-05-25 19:38:31 +02:00
-
977c3670f3
stage-31 polish: featured hero — full-bleed animated grid cycling colors
m17hr1l
2026-05-25 19:32:27 +02:00
-
3f1f7cc420
stage-31 polish: featured-threat banner — uniform tint, full width
m17hr1l
2026-05-25 19:28:26 +02:00
-
04e0d3323f
stage-31 fix: featured card — display:block on the new <a> wrapper
m17hr1l
2026-05-25 19:15:48 +02:00
-
5cf7cb5655
stage-31 polish: featured banner header + clickable news cards w/ hover
m17hr1l
2026-05-25 19:12:55 +02:00
-
f51e672ad3
stage-31 fix: home page 500 — replace bad jinja sum with precomputed count
m17hr1l
2026-05-25 19:05:25 +02:00
-
76a0b0b636
stage-31: Newsline polish — featured case, time buckets, severity accents, generated visuals
m17hr1l
2026-05-25 19:02:22 +02:00
-
4d36db90f1
stage-30 fix: SW cache strategy — bump version + stale-while-revalidate
m17hr1l
2026-05-25 17:36:08 +02:00
-
88e4fb1dcd
stage-30 fix: proper responsive nav (hamburger drawer) + cases-pipeline fix
m17hr1l
2026-05-25 17:27:11 +02:00
-
16cf873044
stage-30: home page (Newsline digest) + PWA + mobile pass
m17hr1l
2026-05-25 17:18:40 +02:00
-
7a57a7390a
stage-29 fix: inference service — wire build: directive in compose
m17hr1l
2026-05-25 17:08:50 +02:00
-
d7999150b3
stage-29: fetch-all resilience + Mozilla-compatible UA for CISA
m17hr1l
2026-05-25 16:56:27 +02:00
-
fad7ad0d49
stage-28: make the proxy docker network name configurable per environment
m17hr1l
2026-05-25 16:45:47 +02:00
-
92f754e012
stage-28: wire LETSENCRYPT_HOST + LETSENCRYPT_EMAIL on the cockpit service
m17hr1l
2026-05-25 16:42:46 +02:00
-
9c3447723a
stage-28 fix: deploy.sh — auto-trust Gitea host (TOFU), never touch identity keys
m17hr1l
2026-05-25 16:36:18 +02:00
-
9edd56e28b
stage-28 fix: deploy.sh — read-only SSH preflight, no key/known_hosts edits
m17hr1l
2026-05-25 15:39:06 +02:00
-
2c2ead6149
stage-28 fix: deploy.sh pre-trusts the Gitea SSH host key (first-clone)
m17hr1l
2026-05-25 15:32:44 +02:00
-
61b7b8ef20
stage-28: deploy.sh — idempotent remote deploy + health probe
m17hr1l
2026-05-25 14:51:47 +02:00
-
494755ec4f
stage-26d: click any topology node → structured spec panel below
m17hr1l
2026-05-25 12:25:15 +02:00
-
ef88cd9d5d
stage-26c: topology layout views, traffic flow, full-width page
m17hr1l
2026-05-25 12:20:18 +02:00
-
b51a88d502
stage-26b: Docker topology in /admin — read-only socket-proxy + graph
m17hr1l
2026-05-23 03:08:39 +02:00
-
eaca27be26
stage-27 polish: admin presence announces itself in the topbar
m17hr1l
2026-05-23 01:14:58 +02:00
-
cb7bef4e40
stage-27: per-member TOTP enrollment + individual revocation
m17hr1l
2026-05-23 00:46:45 +02:00
-
4a832964a3
stage-26 polish: restyle the /admin gate as a secure console
m17hr1l
2026-05-23 00:38:47 +02:00
-
abdf5e7747
stage-26: hidden /admin gated by TOTP (authenticator-app 2FA)
m17hr1l
2026-05-23 00:35:02 +02:00
-
73a932d8be
stage-25: response actions — human-gated enforcement + the disco
m17hr1l
2026-05-23 00:24:31 +02:00
-
d0a71d0226
stage-24: indicator lookup page + blocklist download in cockpit
m17hr1l
2026-05-22 23:55:50 +02:00
-
9a2a31ec9a
stage-23: IOC index + lookup — the actionable keystone
m17hr1l
2026-05-22 23:39:05 +02:00
-
f88db2fdf7
stage-22: cockpit reflects the live adapter + all six feeds
m17hr1l
2026-05-22 23:33:19 +02:00
-
ee387abcd4
stage-21: swap inference server to psyc-v5 adapter
m17hr1l
2026-05-20 23:55:47 +02:00
-
376c5b6f4a
stage-19-fix2: OTX — narrow by modified_since, longer timeout
m17hr1l
2026-05-20 22:39:24 +02:00
-
f6fa52839f
stage-20: defanging pipeline for IOC-extraction augmentation
m17hr1l
2026-05-20 22:33:52 +02:00