commit log
- Document local mine repository authority ffbe127 Jaime Fournier
- Update jpkg metadata for Forgejo 8a00a3a Jaime Fournier
- docs: remove jerboa-emacs restriction f4c7554 Jaime Fournier
- Remove GitHub workflow metadata bf3dc6e Jaime Fournier
- update AGENTS.md 4ed34a7 Jaime Fournier
- perf(buffer): O(1) store/evict via per-priority FIFO queues (P2) 5a11729 Jaime Fournier
- perf(network-guard): peer table as a hash keyed by peer (P2) 6b7c0a9 Jaime Fournier
- perf(agent-server): run ECIES encryption outside the agent lock (P2) 50497d2 Jaime Fournier
- ci: set umask 022 in package/verify tasks too (jerbuild creates group-writable cache dirs during pkg operations) 2ee7973 Jaime Fournier
- ci: set umask 022 to prevent group-writable cache dirs (sr.ht default umask creates 0775 dirs) ab77daa Jaime Fournier
- ci: add JERBOA_CC_OPT=-O0 (OOM fix) and mkdir -p ~/.cache 18a9fc2 Jaime Fournier
- ci: chmod go-w ~/.cache before pkg commands (sr.ht cache is group-writable) 7403bc5 Jaime Fournier
- Build with JERBOA_NATIVE_FEATURES=tls (smaller, avoids OOM) d228f8e Jaime Fournier
- fix: privdrop validates target uid/gid and asserts euid post-drop (P1 #23) e0f5678 Jaime Fournier
- fix: threats sequence-pair binds type/json-filter as ? params (P1 #23) 9726534 Jaime Fournier
- fix: yaml-rules group_by SQL injection — whitelist columns, fail closed (P1 #23) 16f5667 Jaime Fournier
- Add 4GB swap + limit cargo to 1 job (avoid OOM on 2GB sr.ht VMs) 59a44aa Jaime Fournier
- Add rustup + CHEZ_CONFIGURE_EXTRA to build-jerboa (fix missing rust install) 4fd3a1b Jaime Fournier
- Install Rust before make jerboa (native-bundle needs cargo) 365aaae Jaime Fournier
- fix: replay protection on the pull protocol (AAD-bound seq + per-direction keys) 67ffd7f Jaime Fournier
- Add jpkg packaging 8b4ce7a Jaime Fournier
- Add sr.ht CI 118be9c Jaime Fournier
- Switch to MIT license 9702545 Jaime Fournier
- build: add lint target 790fb5c Jaime Fournier
- fix: psk-transport min-length check, connection aging, store-close, hex validation, TMPDIR buffer 0128156 Jaime Fournier
- Update SQLite repository references b9d8009 Jaime Fournier
- Harden monitoring transport and key handling 079330b Jaime Fournier
- Add Secmon SBOM release evidence 90e73bd Jaime Fournier
- Security hardening and release readiness 6fc0d2b Jaime Fournier
- Add mux telemetry intake ac26955 Jaime Fournier
- Use vendored jsqlite 76c430a Jaime Fournier
- llvmir: add the pure psk-hex kernels to the native LLVM build 51f920c Jaime Fournier
- llvmir: native LLVM-backend build for the six pure kernels 9c301c1 Jaime Fournier
- Bring jerboa-secmon to secmon parity 0b06ccd Jaime Fournier
- Complete Jerboa agent polling port bb1b384 Jaime Fournier
- docs: mark monitors + event-json + collector complete in README 79574aa Jaime Fournier
- Add agent collector loop: drain monitors into the SQLite store 7d1d003 Jaime Fournier
- Port secmon event_json.rs: flat-JSON event data serializer 96c533f Jaime Fournier
- monitor: tie the four monitors together with a manager (mod.rs) 151cd39 Jaime Fournier
- monitor: port secmon's DNS monitor polling fallback (dns.rs) 98e620a Jaime Fournier
- monitor: port secmon's file-integrity monitor (files.rs) dac7b9d Jaime Fournier
- monitor: port secmon's network-monitor scan loop (network.rs) 8f7f54c Jaime Fournier
- monitor: port secmon's process-monitor scan loop (process.rs) c6a9ec6 Jaime Fournier
- docs: mark the crypto layer (primitives + psk + ecies) complete a9d2b02 Jaime Fournier
- jsecmon: ECIES public-key encrypt/decrypt runnable end-to-end 1d97ee6 Jaime Fournier
- jsecmon: PSK challenge/response handshake runnable end-to-end f01a329 Jaime Fournier
- jsecmon: PSK transport encrypt/decrypt runnable end-to-end 39ac7b6 Jaime Fournier
- typed/psk: transport seal/open (AES-256-GCM, nonce-prepended frame) 3baf2fa Jaime Fournier
- typed/ecies: deterministic ECIES seal/open kernel 83f6697 Jaime Fournier
- typed/crypto: AES-256-GCM AEAD kernels (encrypt/decrypt) 3933ecb Jaime Fournier