commit log
- typed/crypto: X25519 ECDH + ECIES key derivation 1de1090 Jaime Fournier
- typed/psk: HKDF key-split + compute_proof challenge core ddc41b8 Jaime Fournier
- typed/crypto: SHA-256/HMAC/HKDF kernels via FFI to RustCrypto f27ff8d Jaime Fournier
- calendar: pure UTC epoch-ms <-> civil-date layer (chrono parity) 5b23e86 Jaime Fournier
- Port storage::entity_timeline field routing to pure Jerboa 044e03a Jaime Fournier
- detect.ss: faithful label-level DGA dedup via dga-label kernel d75d25b Jaime Fournier
- Port Rule 12 (DGA domain detection) to pure Jerboa 31db607 Jaime Fournier
- correlate Rule 13: port detect_impossible_travel (geo-correlation) fe3fb3a Jaime Fournier
- correlate Rule 11: port detect_lolbin_cmdline into lolbin.ss b9fd138 Jaime Fournier
- correlate: port sliding-window + sequence-pair detect_* (batch 2) 212299b Jaime Fournier
- correlate: port storage detect_* GROUP-BY rules as pure cores (batch 1) 865931e Jaime Fournier
- event-danger: port NamespaceEventInfo::ns_types (CLONE_NEW* decoder) 170fdca Jaime Fournier
- frame: port server/protocol length-prefixed wire framing (untyped) f809835 Jaime Fournier
- ioc: expose match_iocs per-type field routing (pure data) 9b5d928 Jaime Fournier
- Port anomaly_rule_attack tactic tagger into (jsecmon analytics) d36d916 Jaime Fournier
- Add lolbin match breakdown: typed match-bits kernel + untyped diagnostic layer 7b6e981 Jaime Fournier
- Port detect_kill_chain core + detect_off_hours predicate into (jsecmon analytics) 5ae0900 Jaime Fournier
- Port detect_frequency_spikes' per-host hourly-spike core into (jsecmon analytics) 763b4ad Jaime Fournier
- Port detect_severity_clusters' sliding-window core into (jsecmon analytics) 7ce36c7 Jaime Fournier
- Port detect_sequence_pair's kill-chain core into (jsecmon analytics) d26b217 Jaime Fournier
- Port parse_module_line into (jsecmon proc-linux) c526e7f Jaime Fournier
- Port parse_freebsd_status into (jsecmon freebsd-parse) 7301fe3 Jaime Fournier
- Port parse_ip_udp_dns into (jsecmon dns-sniffer) 3fe5f4f Jaime Fournier
- Port parse_security_environ into (jsecmon proc-linux) c903f12 Jaime Fournier
- Port FreeBSD sockstat/netstat connection-line parsers cff8490 Jaime Fournier
- Port monitor/auth log-line parsers to (jsecmon auth) 3964dba Jaime Fournier
- Port lateral is_internal_ip + faithful IpAddr parser to untyped Jerboa 0d353c7 Jaime Fournier
- Port detection-rule ATT&CK catalog to untyped Jerboa f6141aa Jaime Fournier
- Port logtamper decision core to untyped Jerboa 712d9ef Jaime Fournier
- Port cron scheduled-task path tables + classifier to untyped Jerboa b2648bf Jaime Fournier
- Port revshell reverse-shell classifiers to untyped Jerboa 7193bae Jaime Fournier
- jsecmon: port storage IOC detection (new ioc.ss) + fix event-summary test note 667c3e5 Jaime Fournier
- jsecmon: port storage event readers (new event-summary.ss) 76f61c9 Jaime Fournier
- jsecmon: add analyze-cli parse-alert-sinks (collect every --alert-to) e516e49 Jaime Fournier
- jsecmon: port collector.rs CLI/hosts parsers (new collector-cli.ss) ac1f1b9 Jaime Fournier
- jsecmon: add analyze-cli --flag scanners (parse-flag-value/has-flag/is-json-format) f82a78b Jaime Fournier
- analyze-cli: port parse_duration_ms + AlertSink::parse (untyped) 0181195 Jaime Fournier
- freebsd-parse: add parse-ps-line (ps -axo fallback parser) ed0137b Jaime Fournier
- platform-mounts: port is_dangerous_path + get_mounts parsers (untyped) e272a24 Jaime Fournier
- webshell: port WebshellMonitor name/cmdline classifiers (untyped) 37a3432 Jaime Fournier
- file-change: port FileIntegrityMonitor::is_suspicious_change (untyped) 2ebc4c0 Jaime Fournier
- Port monitor/persistence pure helpers to untyped Jerboa a65c6df Jaime Fournier
- Port monitor/events mount+capability danger predicates to untyped Jerboa 222852c Jaime Fournier
- Port config/mod.rs (AgentConfig) pure parts to untyped Jerboa 1df902f Jaime Fournier
- Port event_json + local_store classification tables to untyped Jerboa a78d3e0 Jaime Fournier
- Port platform::freebsd parsers to untyped Jerboa fbdadb4 Jaime Fournier
- Port secmon platform::linux /proc parsers to (jsecmon proc-linux) aefc420 Jaime Fournier
- Port secmon dtrace::consumer EventParser line parsing to (jsecmon dtrace-parse) 050f57e Jaime Fournier
- Port secmon dtrace::scripts::is_sensitive_path to (jsecmon sensitive-path) 1155b70 Jaime Fournier
- Port secmon read_dns_servers core to (jsecmon dns-servers) 136776e Jaime Fournier