tangle, branch HEAD

runtime: gate host ops routes by config

2026-06-23T00:05:20Z

commit 54ed7f0da3232f16ad3a5f8e1bc1d961b4995ce3 parent 8721915062674b7f605624e52a5d88a03a2292d2 Author: triesap Date: Tue, 23 Jun 2026 00:05:20 +0000 runtime: gate host ops routes by config - enforce host ops disablement for read endpoints - gate tenant inventory behind explicit exposure policy - preserve tenant NIP-11 routing when ops are disabled - cover enabled, inventory-disabled, and disabled states

tests: use neutral compatibility fixture

2026-06-22T23:40:00Z

commit 8721915062674b7f605624e52a5d88a03a2292d2 parent bf5d6afc1fbeb045c496d585880105eddc045304 Author: triesap Date: Mon, 22 Jun 2026 23:40:00 +0000 tests: use neutral compatibility fixture - rename source-specific unknown policy field fixture - keep compatibility field rejection coverage intact - preserve strict NIP-29 closed-group semantics - verify group and runtime targeted tests

runtime: expose relay event timestamps

2026-06-20T00:25:04Z

commit bf5d6afc1fbeb045c496d585880105eddc045304 parent 670b5b59575478d57f76cc16497395ed60444e07 Author: triesap Date: Fri, 19 Jun 2026 17:25:04 -0700 runtime: expose relay event timestamps - add created-at metadata to neutral relay event contexts - populate hook context timestamps from Pocket events - assert admission and stored hooks observe stable timestamps - keep runtime hook behavior otherwise unchanged

runtime: add relay event hooks

2026-06-19T23:47:51Z

commit 670b5b59575478d57f76cc16497395ed60444e07 parent e4879ff3be7a5fbd798d4143afd23198c053122f Author: triesap Date: Fri, 19 Jun 2026 16:47:51 -0700 runtime: add relay event hooks - expose neutral event admission and stored-event hook contexts - keep default relay runtime behavior unchanged with noop hooks - cover hook rejection and stored-offset notification in runtime tests

host: isolate virtual relay host shell

2026-06-19T23:03:20Z

commit e4879ff3be7a5fbd798d4143afd23198c053122f parent 1a2c9857097e5446a920f5afeec745486630fa12 Author: triesap Date: Fri, 19 Jun 2026 16:03:20 -0700 host: isolate virtual relay host shell - move request Host resolution into the host runtime - expose tenant inventory as host-owned typed snapshots - keep server HTTP handlers as thin adapters over the host shell - guard host lookup and inventory ownership with source invariants

runtime: extract neutral relay runtime boundary

2026-06-19T22:55:51Z

commit 1a2c9857097e5446a920f5afeec745486630fa12 parent 56cc5dc4589285464b4fb2076228082ee87a13ec Author: triesap Date: Fri, 19 Jun 2026 15:55:51 -0700 runtime: extract neutral relay runtime boundary - rename per-relay runtime handles away from tenant-owned terminology - move aggregate resource permits into a neutral runtime module - route host and websocket sessions through neutral relay resources - add source invariants for relay runtime and session admission boundaries

bench: add v1 mvp release gates

2026-06-17T23:51:43Z

commit 56cc5dc4589285464b4fb2076228082ee87a13ec parent 9035a5f813ace390e4ac29f96da367a4839b06ea Author: triesap Date: Wed, 17 Jun 2026 16:51:43 -0700 bench: add v1 mvp release gates Adds the virtual-relay tenancy benchmark profile, release acceptance coverage, and source invariants for the Tangle v1 MVP multi-tenant boundary.

feat: add tenant backup restore export

2026-06-17T23:36:00Z

commit 9035a5f813ace390e4ac29f96da367a4839b06ea parent 4b49dfefdf4106dc7f10ad4af00e9d38d53dcf9d Author: triesap Date: Wed, 17 Jun 2026 16:36:00 -0700 feat: add tenant backup restore export - add tenant-scoped backup bundles with redacted config and checksums - add checksum-verified clean-target restore - add tenant-local JSONL export with manifests - expose the approved tenant admin CLI commands

tests: add tenant isolation proof

2026-06-17T23:16:48Z

commit 4b49dfefdf4106dc7f10ad4af00e9d38d53dcf9d parent 51373b43e9566f6162e864a4da35ef68c88965f1 Author: triesap Date: Wed, 17 Jun 2026 16:16:48 -0700 tests: add tenant isolation proof - prove same event ids stay tenant-local - cover same group ids and generated state signatures - assert tenant-local rate limits and fanout - reject shared Pocket store configuration

server: route requests by tenant host

2026-06-17T22:58:31Z

commit 51373b43e9566f6162e864a4da35ef68c88965f1 parent 1b5f9c9afc9aad27ab178683245354c157474e27 Author: triesap Date: Wed, 17 Jun 2026 15:58:31 -0700 server: route requests by tenant host - serve Tangle through the host runtime router - resolve tenant Host before NIP-11 and WebSocket sessions - replace legacy ops paths with well-known host endpoints - enforce host connection and subscription caps in sessions

host: add tenant registry runtime

2026-06-17T22:38:43Z

commit 1b5f9c9afc9aad27ab178683245354c157474e27 parent a9c835bff7686b19ae61a58e51039d0ca732ab7c Author: triesap Date: Wed, 17 Jun 2026 15:38:43 -0700 host: add tenant registry runtime - add the host runtime and active tenant registry - open active tenant runtimes without serving inactive tenants - add host readiness shutdown metrics and cap primitives - cover multi-tenant startup and aggregate limits with tests

runtime: rename tenant runtime surface

2026-06-17T22:31:14Z

commit a9c835bff7686b19ae61a58e51039d0ca732ab7c parent c14fc50442100c9592bdd8d8343c6a8088e35a7a Author: triesap Date: Wed, 17 Jun 2026 15:31:14 -0700 runtime: rename tenant runtime surface - rename the runtime and handle to tenant-owned types - remove stale single-runtime loader exports - update tests and benchmarks to the tenant runtime names - guard the tenant runtime API with source invariants

cli: add host config validation commands

2026-06-17T22:23:45Z

commit c14fc50442100c9592bdd8d8343c6a8088e35a7a parent aa4fea1c236bed5ee7575fb236359ef07e6c4825 Author: triesap Date: Wed, 17 Jun 2026 15:23:45 -0700 cli: add host config validation commands - load tenant configs from the host config directory - validate duplicate tenant identity and store boundaries - add redacted config inspect and tenant list commands - run the relay from the new host config surface

config: add tenant host config contract

2026-06-17T22:16:37Z

commit aa4fea1c236bed5ee7575fb236359ef07e6c4825 parent 91c6ddfdf3aba9466a2c92242de299d6a0ca540f Author: triesap Date: Wed, 17 Jun 2026 15:16:37 -0700 config: add tenant host config contract - add typed tenant identity and canonical host primitives - add strict v1 MVP host and tenant config parsers - add host and tenant example config files - guard the virtual relay tenancy source authority

runtime: suppress HLL for group targets

2026-06-16T21:44:36Z

commit 91c6ddfdf3aba9466a2c92242de299d6a0ca540f parent d5c68ab256ecddefc836164de764cff7bc005d38 Author: triesap Date: Tue, 16 Jun 2026 14:44:36 -0700 runtime: suppress HLL for group targets

runtime: extract HLL group targets

2026-06-16T21:14:19Z

commit d5c68ab256ecddefc836164de764cff7bc005d38 parent 936e8bae39e0e824ecafcb40ff7162e43f3ed45a Author: triesap Date: Tue, 16 Jun 2026 14:14:19 -0700 runtime: extract HLL group targets

runtime: forbid custom Pocket verification

2026-06-16T20:50:40Z

commit 936e8bae39e0e824ecafcb40ff7162e43f3ed45a parent 88c7733777161c76940c6e1003c6bbc0948404b2 Author: triesap Date: Tue, 16 Jun 2026 13:50:40 -0700 runtime: forbid custom Pocket verification

runtime: verify Pocket events natively

2026-06-16T20:48:06Z

commit 88c7733777161c76940c6e1003c6bbc0948404b2 parent 26b081bf8d0929d5343f993fa069a540eb6fb620 Author: triesap Date: Tue, 16 Jun 2026 13:48:06 -0700 runtime: verify Pocket events natively

runtime: cover verifier error categories

2026-06-16T20:37:09Z

commit 26b081bf8d0929d5343f993fa069a540eb6fb620 parent e168d97755148343affcd3fd75138db3a6708b2e Author: triesap Date: Tue, 16 Jun 2026 13:37:09 -0700 runtime: cover verifier error categories

runtime: enforce Pocket source invariants

2026-06-16T07:47:30Z

commit e168d97755148343affcd3fd75138db3a6708b2e parent 350bf9d13a9b5f0eb1abec90acefd1151d6b9505 Author: triesap Date: Tue, 16 Jun 2026 00:47:30 -0700 runtime: enforce Pocket source invariants - gate protocol event conversions behind test-only adapters - return runtime messages from Pocket query and fanout paths - move auth and projection tests onto Pocket event views - add a production source invariant for runtime and groups

runtime: harden HLL privacy eligibility

2026-06-16T07:24:19Z

commit 350bf9d13a9b5f0eb1abec90acefd1151d6b9505 parent 3e0d1de6407e9d28f9eb2fbd0c1aa5b65ab35686 Author: triesap Date: Tue, 16 Jun 2026 00:24:19 -0700 runtime: harden HLL privacy eligibility - Add a suppressible HLL accumulator for count scans. - Suppress HLL for private hidden unknown redacted limited and multi-filter counts. - Preserve public single-filter HLL behavior and exact count semantics. - Prove disabled negentropy does not validate or screen storage filters.

runtime: store generated Pocket events

2026-06-16T07:16:40Z

commit 3e0d1de6407e9d28f9eb2fbd0c1aa5b65ab35686 parent de7e20d996f6558d40c2a24b177bbb0f49abe236 Author: triesap Date: Tue, 16 Jun 2026 00:16:40 -0700 runtime: store generated Pocket events - Store relay-generated group events as single Pocket-owned events. - Remove protocol generated signing helpers from the group builder. - Update generated recovery fixtures to materialize Pocket events directly. - Gate protocol-to-Pocket conversion helpers to test-only adapter paths.

groups: sign generated Pocket events

2026-06-16T07:03:29Z

commit de7e20d996f6558d40c2a24b177bbb0f49abe236 parent 6b1ca6d8fb9c71194da3ff7268573b2e6edfb3be Author: triesap Date: Tue, 16 Jun 2026 00:03:29 -0700 groups: sign generated Pocket events - add RelaySigner support for Pocket-owned event signing - build generated group payloads through Pocket tags - verify generated Pocket events after signing - cover generated NIP-29 events with stable golden ids

runtime: rebuild groups from Pocket events

2026-06-16T06:57:46Z

commit 6b1ca6d8fb9c71194da3ff7268573b2e6edfb3be parent d5ce401cfcfbc644bad990ab2e1f6570a30db71e Author: triesap Date: Mon, 15 Jun 2026 23:57:46 -0700 runtime: rebuild groups from Pocket events - store canonical group rebuild records as Pocket events - scan Pocket storage without protocol event conversion - replay checkpoints and missing outbox records from Pocket views - align rebuild tests with Pocket-backed canonical events

runtime: plan group writes from event views

2026-06-16T06:53:39Z

commit d5ce401cfcfbc644bad990ab2e1f6570a30db71e parent 8e8ccd0edb74a17acfe2918fd4c8710ede997f47 Author: triesap Date: Mon, 15 Jun 2026 23:53:39 -0700 runtime: plan group writes from event views - store Pocket group source events without protocol conversion - apply projection from the stored source event view - derive outbox records through GroupEventView helpers - keep rebuild conversion deferred to the recovery slice

groups: apply projection from event views

2026-06-16T06:50:46Z

commit 8e8ccd0edb74a17acfe2918fd4c8710ede997f47 parent b182c2d7957c22b8c17bb87830befea44c80263e Author: triesap Date: Mon, 15 Jun 2026 23:50:46 -0700 groups: apply projection from event views - make projection ordering derive from GroupEventView - parse group metadata through event views - move projection tag handling off protocol Tag values - prove Pocket and protocol projection state equivalence

groups: extend event view primitives

2026-06-16T06:45:23Z

commit b182c2d7957c22b8c17bb87830befea44c80263e parent 513ac06a6db8c1d7e37a6e235b0a7f66c96f3ada Author: triesap Date: Mon, 15 Jun 2026 23:45:23 -0700 groups: extend event view primitives - add neutral created-at access to group event views - expose full validated tag values for projection parsing - implement the new surface for Pocket owned events - cover Pocket view fields with focused group tests

runtime: close protocol relay boundaries

2026-06-16T03:46:12Z

commit 513ac06a6db8c1d7e37a6e235b0a7f66c96f3ada parent cc8c614a33051151a58fa7722f36648b781ba732 Author: triesap Date: Mon, 15 Jun 2026 20:46:12 -0700 runtime: close protocol relay boundaries - Add Pocket-native direct relay REQ and fanout APIs for production callers. - Quarantine old protocol relay helpers behind explicit test-only names. - Move benchmark and integration adapters to Pocket conversion boundaries. - Validate runtime, workspace test, workspace check, source scans, and clippy lanes.

runtime: isolate generated group Pocket storage

2026-06-16T03:33:38Z

commit cc8c614a33051151a58fa7722f36648b781ba732 parent 7d173dc8bd37dc7fc6aedbb451541a289c974cc5 Author: triesap Date: Mon, 15 Jun 2026 20:33:38 -0700 runtime: isolate generated group Pocket storage - Add an explicit generated group storage adapter that signs payloads and stores Pocket events. - Keep projection application at the existing group boundary while avoiding a broad signer rewrite. - Verify generated Pocket event id, tags, and signature at the adapter boundary. - Validate generated, group, signing, workspace check, source scan, and clippy lanes.

runtime: count events with Pocket filters

2026-06-16T03:26:03Z

commit 7d173dc8bd37dc7fc6aedbb451541a289c974cc5 parent ee4e7d1ba5a4eafe27fe6f230f3ff13a992d45a1 Author: triesap Date: Mon, 15 Jun 2026 20:26:03 -0700 runtime: count events with Pocket filters - Validate and execute COUNT filters as Pocket-owned filters through runtime and relay core. - Compute exact counts and HLL from Pocket events while preserving privacy gates and limitless count queries. - Remove the obsolete Pocket-to-protocol filter conversion and protocol rate-limit path. - Validate count, hll, workspace check, source scan, and clippy lanes.

runtime: query reqs with Pocket filters

2026-06-16T03:08:50Z

commit ee4e7d1ba5a4eafe27fe6f230f3ff13a992d45a1 parent 6ac248f91364861379dc18f458afaf63aefc2db3 Author: triesap Date: Mon, 15 Jun 2026 20:08:50 -0700 runtime: query reqs with Pocket filters - Validate and execute REQ filters as Pocket-owned filters through the shared query path. - Move REQ rate-limit classification and live subscription decisions onto Pocket filters. - Preserve protocol conversion only at protocol helper and COUNT/HLL boundaries. - Validate the req, complete, redacted, workspace check, source scan, and clippy lanes.

runtime: match live subscriptions with Pocket

2026-06-16T02:52:51Z

commit 6ac248f91364861379dc18f458afaf63aefc2db3 parent 7421ae582d1d6c82ef8ec8ee654fa5e286adfd76 Author: triesap Date: Mon, 15 Jun 2026 19:52:51 -0700 runtime: match live subscriptions with Pocket - Store live subscription filters as Pocket-owned filters. - Match live fanout with Pocket event_matches and return subscription ids. - Keep runtime offset fanout Pocket-backed through outbound EVENT construction. - Validate live, current-auth live, workspace check, source scan, and clippy lanes.

runtime: encode outbound events from Pocket

2026-06-16T02:44:39Z

commit 7421ae582d1d6c82ef8ec8ee654fa5e286adfd76 parent 16a0af31a3a49caee23c41b3add4e98c75ff9359 Author: triesap Date: Mon, 15 Jun 2026 19:44:39 -0700 runtime: encode outbound events from Pocket - Add a runtime relay message boundary for Pocket-backed outbound EVENT replies. - Encode outbound EVENT frames from Pocket event JSON while preserving protocol encoders for non-event replies. - Keep offset lookup and live offset fanout payloads Pocket-owned through session enqueueing. - Validate the offset, outbound, protocol relay-message, workspace check, and clippy lanes.

runtime: write groups from Pocket events

2026-06-16T02:19:40Z

commit 16a0af31a3a49caee23c41b3add4e98c75ff9359 parent e7135aec4465f94152729da628ab01149769f28c Author: triesap Date: Mon, 15 Jun 2026 19:19:40 -0700 runtime: write groups from Pocket events - add a Pocket-native group service write entry point - store inbound group source events without protocol reserialization - read group delete-target and audit fields through GroupEventView - keep protocol event storage helpers limited to tests and generated state

runtime: admit events through Pocket storage

2026-06-16T02:11:58Z

commit e7135aec4465f94152729da628ab01149769f28c parent bfaa2cc638ef740b28ab42fb246a2a792e4805ba Author: triesap Date: Mon, 15 Jun 2026 19:11:58 -0700 runtime: admit events through Pocket storage - add Pocket-native relay event admission APIs - route runtime EVENT dispatch and rate limits through Pocket events - store public non-group events without protocol event rebuilds - quarantine protocol event admission behind test-only adapters

runtime: validate auth through Pocket events

2026-06-16T01:58:57Z

commit bfaa2cc638ef740b28ab42fb246a2a792e4805ba parent 5868a5a46979d1c7acd588a8c760b3dfde88067e Author: triesap Date: Mon, 15 Jun 2026 18:58:57 -0700 runtime: validate auth through Pocket events - add Pocket event identity signature and protected-tag helpers - authenticate NIP-42 AUTH events without protocol conversion - rate limit Pocket AUTH attempts and failures directly - cover Pocket signature protected tag and auth edge cases

runtime: dispatch sessions through runtime messages

2026-06-16T01:45:22Z

commit 5868a5a46979d1c7acd588a8c760b3dfde88067e parent 15d74820da9bb4fbcfc60ce69c4937e9a2a43f2b Author: triesap Date: Mon, 15 Jun 2026 18:45:22 -0700 runtime: dispatch sessions through runtime messages - remove the session protocol message bridge - route session and runtime dispatch through RuntimeClientMessage - keep protocol fixtures behind test-only runtime adapters - retarget source-shape guards to runtime message branches

runtime: add pocket-native client message boundary

2026-06-16T01:38:16Z

commit 15d74820da9bb4fbcfc60ce69c4937e9a2a43f2b parent ae6ea890ea3dba4b974be661bfccc101ee74ecb5 Author: triesap Date: Mon, 15 Jun 2026 18:38:16 -0700 runtime: add pocket-native client message boundary - add RuntimeClientMessage with Pocket-owned event and filter payloads - parse EVENT and AUTH directly through Pocket event JSON - parse REQ COUNT and NEG-OPEN filters through Pocket JSON - keep session behavior stable for the parser boundary checkpoint

runtime: add safe count hll parity

2026-06-15T21:59:05Z

commit ae6ea890ea3dba4b974be661bfccc101ee74ecb5 parent 0a84d0a813e87869fa4d5a9e55f4ad86d1bf99d3 Author: triesap Date: Mon, 15 Jun 2026 14:59:05 -0700 runtime: add safe count hll parity

runtime: disable negentropy surface

2026-06-15T21:45:07Z

commit 0a84d0a813e87869fa4d5a9e55f4ad86d1bf99d3 parent 3b55068d79195f859bc789729aae3e8307ec8bff Author: triesap Date: Mon, 15 Jun 2026 14:45:07 -0700 runtime: disable negentropy surface

runtime: parse req count through Pocket

2026-06-15T21:33:49Z

commit 3b55068d79195f859bc789729aae3e8307ec8bff parent 34c47f2e83f4a4f9977d1cb685ee5f181c5e087b Author: triesap Date: Mon, 15 Jun 2026 14:33:49 -0700 runtime: parse req count through Pocket - route REQ COUNT and CLOSE through the runtime parser boundary - convert Pocket filters back into typed Tangle filters - preserve unsupported search and malformed filter rejection behavior - keep protocol parser usage outside runtime WebSocket source

runtime: parse event auth through Pocket

2026-06-15T21:20:02Z

commit 34c47f2e83f4a4f9977d1cb685ee5f181c5e087b parent b8992e9381892358079e3042ba91c07cf8a3fc21 Author: triesap Date: Mon, 15 Jun 2026 14:20:02 -0700 runtime: parse event auth through Pocket

runtime: close redacted reqs

2026-06-15T21:11:41Z

commit b8992e9381892358079e3042ba91c07cf8a3fc21 parent 4b0a20d9cd416b5c27cdb1565d7ac3d2144e4a6b Author: triesap Date: Mon, 15 Jun 2026 14:11:41 -0700 runtime: close redacted reqs

runtime: use current auth for live reqs

2026-06-15T20:57:06Z

commit 4b0a20d9cd416b5c27cdb1565d7ac3d2144e4a6b parent d33f78987ee4e56fc777cb89efa13cade9858e40 Author: triesap Date: Mon, 15 Jun 2026 13:57:06 -0700 runtime: use current auth for live reqs

tests: prove group write races

2026-06-15T12:02:04Z

commit d33f78987ee4e56fc777cb89efa13cade9858e40 parent 0a6352ec30b906e2edd615da3fd1ddc28cf4920c Author: triesap Date: Mon, 15 Jun 2026 05:02:04 -0700 tests: prove group write races - Add production-path concurrency tests for duplicate create and duplicate join races. - Cover join versus leave, delete versus write, and put versus remove races. - Compare live group semantics with canonical Pocket replay after race handling. - Validate group, recovery, privacy, check, clippy, and forbidden-surface lanes.

protocol: reject duplicate object fields

2026-06-15T11:53:42Z

commit 0a6352ec30b906e2edd615da3fd1ddc28cf4920c parent 91e88275889d008ecefa9d7cdcb4b261c7a09c57 Author: triesap Date: Mon, 15 Jun 2026 04:53:42 -0700 protocol: reject duplicate object fields - Reject duplicate JSON object fields in the retained protocol parser. - Cover duplicate field errors for client filters and event payloads. - Prove addressable events preserve repeated and non-indexed tag shapes. - Validate protocol, runtime, benchmark, workspace, and clippy lanes.

tests: cover unsupported negentropy command parity

2026-06-15T11:47:03Z

commit 91e88275889d008ecefa9d7cdcb4b261c7a09c57 parent 60eab9d6947a9cdfc7e11f6e8d97cf5d130e6604 Author: triesap Date: Mon, 15 Jun 2026 04:47:03 -0700 tests: cover unsupported negentropy command parity - add explicit NEG-OPEN websocket rejection coverage - keep negentropy unimplemented and unadvertised - reuse the Chorus malformed command parity test - preserve unsupported command NOTICE behavior

tests: extend Pocket store parity

2026-06-15T11:42:13Z

commit 60eab9d6947a9cdfc7e11f6e8d97cf5d130e6604 parent 9721af957951dce0e785de5cc4878c136965ba2e Author: triesap Date: Mon, 15 Jun 2026 04:42:13 -0700 tests: extend Pocket store parity - cover mismatch screening without redaction markers - prove all-mismatch screens materialize no events - assert duplicate event writes fail deterministically - prove duplicate writes do not create duplicate scan or query results

runtime: make count exact

2026-06-15T04:22:30Z

commit 9721af957951dce0e785de5cc4878c136965ba2e parent 39b8b42d3268f8f1c35ecf0406af9979023c9be5 Author: triesap Date: Sun, 14 Jun 2026 21:22:30 -0700 runtime: make count exact - split COUNT filtering from REQ default-limit injection - add an exact-count Pocket query mode for accepted counts - prove default and client limits do not cap accepted COUNT results - extend benchmark coverage for exact bounded counts above default_limit

runtime: make group writes atomic

2026-06-15T04:16:17Z

commit 39b8b42d3268f8f1c35ecf0406af9979023c9be5 parent a1a0beb4c97e8e1e8c9331308c2eccad2a0db283 Author: triesap Date: Sun, 14 Jun 2026 21:16:17 -0700 runtime: make group writes atomic - replace split group write handle methods with one locked write boundary - keep group rejection and storage errors distinct for relay responses - route group event storage and generated offsets through the group service - add a source-shape guard for the atomic production path

tests: prove pocket source boundary

2026-06-15T04:11:08Z

commit a1a0beb4c97e8e1e8c9331308c2eccad2a0db283 parent b52b9560ed4849fe3ef2f91f2080b32a0b69f4df Author: triesap Date: Sun, 14 Jun 2026 21:11:08 -0700 tests: prove pocket source boundary - assert Pocket manifests and lock state use the approved fork revision - reject alternate Pocket hosts in source-boundary tests - align benchmark provenance with the store boundary constants - keep the dependency proof inside existing store and benchmark crates

bench: prove benchmark profile gates

2026-06-15T02:37:53Z

commit b52b9560ed4849fe3ef2f91f2080b32a0b69f4df parent a548515e28abc1b5816204ddaea79e37a491958b Author: triesap Date: Sun, 14 Jun 2026 19:37:53 -0700 bench: prove benchmark profile gates

bench: extend benchmark artifact schema

2026-06-15T02:33:20Z

commit a548515e28abc1b5816204ddaea79e37a491958b parent 0df82a8ec4535886b7ce39dd4895da725ab5f57d Author: triesap Date: Sun, 14 Jun 2026 19:33:20 -0700 bench: extend benchmark artifact schema

bench: add proof benchmark profiles

2026-06-15T02:30:01Z

commit 0df82a8ec4535886b7ce39dd4895da725ab5f57d parent 96acdc483d84ba70565f7c7f943b45efb4e46c72 Author: triesap Date: Sun, 14 Jun 2026 19:30:01 -0700 bench: add proof benchmark profiles

bench: rename production benchmark profile

2026-06-15T02:26:20Z

commit 96acdc483d84ba70565f7c7f943b45efb4e46c72 parent 58a171478cdeb59579141e7df8780338adf4c032 Author: triesap Date: Sun, 14 Jun 2026 19:26:20 -0700 bench: rename production benchmark profile

runtime: prove tombstone visibility gates

2026-06-15T02:20:34Z

commit 58a171478cdeb59579141e7df8780338adf4c032 parent 311f53e9b55ed32db27f96aa47532ba904f19f50 Author: triesap Date: Sun, 14 Jun 2026 19:20:34 -0700 runtime: prove tombstone visibility gates

runtime: harden hidden privacy coverage

2026-06-15T02:17:29Z

commit 311f53e9b55ed32db27f96aa47532ba904f19f50 parent d8e665b990b1a31ed354842cd46f5d14bf31a508 Author: triesap Date: Sun, 14 Jun 2026 19:17:29 -0700 runtime: harden hidden privacy coverage

groups: prove projection rebuild equivalence

2026-06-15T02:12:49Z

commit d8e665b990b1a31ed354842cd46f5d14bf31a508 parent 526c08413c746c43a277e5c1ab10a13e460ffddc Author: triesap Date: Sun, 14 Jun 2026 19:12:49 -0700 groups: prove projection rebuild equivalence

runtime: prove generated outbox mark recovery

2026-06-15T02:09:28Z

commit 526c08413c746c43a277e5c1ab10a13e460ffddc parent 8d81fff00db9cca391e99a3e0fe63b8a03912868 Author: triesap Date: Sun, 14 Jun 2026 19:09:28 -0700 runtime: prove generated outbox mark recovery

runtime: prove pending outbox recovery

2026-06-15T02:06:24Z

commit 8d81fff00db9cca391e99a3e0fe63b8a03912868 parent 26434b9aeba54234f6aae19f67d2b73ebbd9abfa Author: triesap Date: Sun, 14 Jun 2026 19:06:24 -0700 runtime: prove pending outbox recovery

runtime: prove source-only recovery

2026-06-15T02:02:27Z

commit 26434b9aeba54234f6aae19f67d2b73ebbd9abfa parent 00bf0c2c5d717095c832d28538c6269f152d15a9 Author: triesap Date: Sun, 14 Jun 2026 19:02:27 -0700 runtime: prove source-only recovery

runtime: prove generated state live fanout

2026-06-15T01:57:00Z

commit 00bf0c2c5d717095c832d28538c6269f152d15a9 parent 42bb1ef88508d320d723d0925f86f14e3593bfee Author: triesap Date: Sun, 14 Jun 2026 18:57:00 -0700 runtime: prove generated state live fanout

bench: cover count resource controls

2026-06-15T01:49:30Z

commit 42bb1ef88508d320d723d0925f86f14e3593bfee parent c5492a5795298358b2963f121789ca488458ac91 Author: triesap Date: Sun, 14 Jun 2026 18:49:30 -0700 bench: cover count resource controls

runtime: prove exact count only

2026-06-15T01:35:14Z

commit c5492a5795298358b2963f121789ca488458ac91 parent ca0dcf9352372ba781d7b4489694f0ae2a04219b Author: triesap Date: Sun, 14 Jun 2026 18:35:14 -0700 runtime: prove exact count only

runtime: expose safe query metrics

2026-06-15T01:29:40Z

commit ca0dcf9352372ba781d7b4489694f0ae2a04219b parent e429592e588e0e57721b66c66f7df0898c092023 Author: triesap Date: Sun, 14 Jun 2026 18:29:40 -0700 runtime: expose safe query metrics

runtime: prove count privacy refusals

2026-06-15T01:20:03Z

commit e429592e588e0e57721b66c66f7df0898c092023 parent d05f5d169c85a0207db6faaae0065d0f6d0ad52c Author: triesap Date: Sun, 14 Jun 2026 18:20:03 -0700 runtime: prove count privacy refusals

runtime: refuse broad count queries

2026-06-15T01:11:16Z

commit d05f5d169c85a0207db6faaae0065d0f6d0ad52c parent 67cb8a1a310e12f06b83b28654a8b34462b04c64 Author: triesap Date: Sun, 14 Jun 2026 18:11:16 -0700 runtime: refuse broad count queries

runtime: classify broad count queries

2026-06-15T01:05:22Z

commit 67cb8a1a310e12f06b83b28654a8b34462b04c64 parent a84211124edb5e6c2b6d2206b43b0406e1958b23 Author: triesap Date: Sun, 14 Jun 2026 18:05:22 -0700 runtime: classify broad count queries

runtime: prove live chorus parity

2026-06-15T00:55:53Z

commit a84211124edb5e6c2b6d2206b43b0406e1958b23 parent afaabd1b486f9266f3579e1403c08a5de488bc1f Author: triesap Date: Sun, 14 Jun 2026 17:55:53 -0700 runtime: prove live chorus parity

runtime: prove nip11 chorus parity

2026-06-15T00:52:30Z

commit afaabd1b486f9266f3579e1403c08a5de488bc1f parent 5ed4d80f2470e3d5693c5800a3ed6595d34a2f41 Author: triesap Date: Sun, 14 Jun 2026 17:52:30 -0700 runtime: prove nip11 chorus parity

runtime: prove auth chorus parity

2026-06-15T00:49:12Z

commit 5ed4d80f2470e3d5693c5800a3ed6595d34a2f41 parent 94a60f76952af42db453ba2d127c103b871b73ac Author: triesap Date: Sun, 14 Jun 2026 17:49:12 -0700 runtime: prove auth chorus parity

runtime: prove close chorus parity

2026-06-15T00:43:49Z

commit 94a60f76952af42db453ba2d127c103b871b73ac parent 726cc097ddcf2e6ff304c38a85374828f9ddb0cc Author: triesap Date: Sun, 14 Jun 2026 17:43:49 -0700 runtime: prove close chorus parity

runtime: prove req count chorus parity

2026-06-15T00:38:25Z

commit 726cc097ddcf2e6ff304c38a85374828f9ddb0cc parent 6fef1da8c6441701aca28af2e26bbd7cd0dd734a Author: triesap Date: Sun, 14 Jun 2026 17:38:25 -0700 runtime: prove req count chorus parity

runtime: prove event chorus parity

2026-06-15T00:33:26Z

commit 6fef1da8c6441701aca28af2e26bbd7cd0dd734a parent 59d8c284e6b41437a03c14366b925212eb448e5b Author: triesap Date: Sun, 14 Jun 2026 17:33:26 -0700 runtime: prove event chorus parity

runtime: prove malformed chorus parity

2026-06-15T00:30:13Z

commit 59d8c284e6b41437a03c14366b925212eb448e5b parent a45d9b443f1ff42f99a846c04678b909e46d8850 Author: triesap Date: Sun, 14 Jun 2026 17:30:13 -0700 runtime: prove malformed chorus parity

protocol: prove hot path coverage

2026-06-15T00:23:24Z

commit a45d9b443f1ff42f99a846c04678b909e46d8850 parent 561fa31180e332da0796f7008d5e1467d1b50711 Author: triesap Date: Sun, 14 Jun 2026 17:23:24 -0700 protocol: prove hot path coverage

runtime: harden live backpressure

2026-06-15T00:15:01Z

commit 561fa31180e332da0796f7008d5e1467d1b50711 parent 304238cd7f9f1a458bd8fce25843bc3344a5f0f5 Author: triesap Date: Sun, 14 Jun 2026 17:15:01 -0700 runtime: harden live backpressure

runtime: stress shared service concurrency

2026-06-15T00:07:29Z

commit 304238cd7f9f1a458bd8fce25843bc3344a5f0f5 parent 817b3031a3e44860144e331fb3e67d41b2f4af3a Author: triesap Date: Sun, 14 Jun 2026 17:07:29 -0700 runtime: stress shared service concurrency

runtime: remove base relay mutex

2026-06-15T00:00:39Z

commit 817b3031a3e44860144e331fb3e67d41b2f4af3a parent 9ef58e4f38c26d4affdaea768d4fccdd935028d6 Author: triesap Date: Sun, 14 Jun 2026 17:00:39 -0700 runtime: remove base relay mutex

runtime: prove fanout offset lock boundary

2026-06-14T23:56:30Z

commit 9ef58e4f38c26d4affdaea768d4fccdd935028d6 parent 78edbcd5c77e36ba7fcbeaf1441dad6133c3149c Author: triesap Date: Sun, 14 Jun 2026 16:56:30 -0700 runtime: prove fanout offset lock boundary

runtime: remove count relay lock

2026-06-14T23:53:10Z

commit 78edbcd5c77e36ba7fcbeaf1441dad6133c3149c parent ba1ebbb8c81cc72eb5831899f40fff9236b337cd Author: triesap Date: Sun, 14 Jun 2026 16:53:10 -0700 runtime: remove count relay lock

runtime: remove req relay lock

2026-06-14T23:44:21Z

commit ba1ebbb8c81cc72eb5831899f40fff9236b337cd parent b357b27818a0ac898ecb6da1b0e83775715211a5 Author: triesap Date: Sun, 14 Jun 2026 16:44:21 -0700 runtime: remove req relay lock

runtime: remove event relay lock

2026-06-14T23:38:57Z

commit b357b27818a0ac898ecb6da1b0e83775715211a5 parent 6c55c2b65a60652decc87f5645641ce0605d2c26 Author: triesap Date: Sun, 14 Jun 2026 16:38:57 -0700 runtime: remove event relay lock

groups: narrow write-side relay access

2026-06-14T23:33:40Z

commit 6c55c2b65a60652decc87f5645641ce0605d2c26 parent dadd67536a5b7fc6e0b24666db1a8b6eb3d39a1f Author: triesap Date: Sun, 14 Jun 2026 16:33:40 -0700 groups: narrow write-side relay access

runtime: use shared group read gates

2026-06-14T23:27:34Z

commit dadd67536a5b7fc6e0b24666db1a8b6eb3d39a1f parent bc9481e065a652aa0d3486e296454b35d5073ae3 Author: triesap Date: Sun, 14 Jun 2026 16:27:34 -0700 runtime: use shared group read gates

groups: introduce service handle state

2026-06-14T23:24:29Z

commit bc9481e065a652aa0d3486e296454b35d5073ae3 parent b70d855cf5f63dc8993c9bdcf433600d11aba27b Author: triesap Date: Sun, 14 Jun 2026 16:24:29 -0700 groups: introduce service handle state

storage: share pocket store handle

2026-06-14T23:19:38Z

commit b70d855cf5f63dc8993c9bdcf433600d11aba27b parent 2897f545c1705ef43a29ac5d53094b7e93df7237 Author: triesap Date: Sun, 14 Jun 2026 16:19:38 -0700 storage: share pocket store handle

runtime: introduce shared handle state

2026-06-14T23:14:51Z

commit 2897f545c1705ef43a29ac5d53094b7e93df7237 parent 23fb3e1ceba3fec8fadfad293ede580b1e6f91fb Author: triesap Date: Sun, 14 Jun 2026 16:14:51 -0700 runtime: introduce shared handle state

query: reject unsupported search filters

2026-06-14T23:05:37Z

commit 23fb3e1ceba3fec8fadfad293ede580b1e6f91fb parent db67342c7416e1e4b03bd20ed8f17e0cf02caa44 Author: triesap Date: Sun, 14 Jun 2026 16:05:37 -0700 query: reject unsupported search filters

query: wire pocket scrape controls

2026-06-14T23:02:08Z

commit db67342c7416e1e4b03bd20ed8f17e0cf02caa44 parent 89c88d56c832052d2cb2d8b44025ce80c7160f1c Author: triesap Date: Sun, 14 Jun 2026 16:02:08 -0700 query: wire pocket scrape controls

storage: honor pocket sync policy

2026-06-14T22:52:13Z

commit 89c88d56c832052d2cb2d8b44025ce80c7160f1c parent 2294160193addfdfb64099453ead4bfb7a535221 Author: triesap Date: Sun, 14 Jun 2026 15:52:13 -0700 storage: honor pocket sync policy

config: remove fake pocket storage knobs

2026-06-14T22:50:16Z

commit 2294160193addfdfb64099453ead4bfb7a535221 parent 05d6103a019e529deeb64f6a5b2ff5afa4fb93c6 Author: triesap Date: Sun, 14 Jun 2026 15:50:16 -0700 config: remove fake pocket storage knobs

tests: prove pocket boundary operations

2026-06-14T22:47:08Z

commit 05d6103a019e529deeb64f6a5b2ff5afa4fb93c6 parent f0121ffe789a07fa699c30d17f872866b992f0cc Author: triesap Date: Sun, 14 Jun 2026 15:47:08 -0700 tests: prove pocket boundary operations

repo: inline validation app surface

2026-06-14T21:43:55Z

commit f0121ffe789a07fa699c30d17f872866b992f0cc parent 7766cefd12ce18e5f3b9e47bb283d47d414d6fdc Author: triesap Date: Sun, 14 Jun 2026 14:43:55 -0700 repo: inline validation app surface - Remove the scripts and ci scaffolding directories. - Inline check, test, coverage, ci, and release-acceptance commands in flake apps. - Update validation guards to assert the flake command surface directly. - Keep the release acceptance and benchmark proof gates available without shell wrappers.

config: move relay example config

2026-06-14T21:39:34Z

commit 7766cefd12ce18e5f3b9e47bb283d47d414d6fdc parent 00f506fe318e69a0e4933513c061e3d49215ac4b Author: triesap Date: Sun, 14 Jun 2026 14:39:34 -0700 config: move relay example config - Move the checked-in relay example config out of ops/production. - Update runtime config and logging fixtures to use config/tangle.example.json. - Align CLI tests with the neutral example config path. - Remove the misleading production ops directory from the repo tree.

bench: add explicit profile claim gates

2026-06-14T20:40:14Z

commit 00f506fe318e69a0e4933513c061e3d49215ac4b parent 194529f5d21901c3e6bc9f7a34fb3f2c1da52b6b Author: triesap Date: Sun, 14 Jun 2026 13:40:14 -0700 bench: add explicit profile claim gates - Add smoke, medium, and production benchmark profiles with named threshold sources. - Allow strict JSON threshold overrides while rejecting missing, unknown, and zero fields. - Record profile, threshold source, and production-claim eligibility in benchmark summaries. - Require target-hardware evidence before production-profile runs can be production-claim eligible.

logging: audit group moderation decisions

2026-06-14T20:34:04Z

commit 194529f5d21901c3e6bc9f7a34fb3f2c1da52b6b parent 80f7feb411ef94c9f08cac71f0c3813576fbce20 Author: triesap Date: Sun, 14 Jun 2026 13:34:04 -0700 logging: audit group moderation decisions - Add structured group moderation audit events with stable action and result fields. - Emit accepted and rejected audit logs from group write validation paths. - Redact group identifiers while avoiding event content, invite codes, and relay secrets. - Cover required action families, target counts, field presence, and sensitive-value exclusion.

rate-limits: add ip-scoped client buckets

2026-06-14T20:26:26Z

commit 80f7feb411ef94c9f08cac71f0c3813576fbce20 parent 32b02ea45824890518f482f77e6b87e4d39bd984 Author: triesap Date: Sun, 14 Jun 2026 13:26:26 -0700 rate-limits: add ip-scoped client buckets - Add required auth, event, group write, and group join IP rate-limit config rules. - Carry peer context through the general client-message handler and WebSocket session path. - Enforce IP buckets before narrower pubkey, kind, group, and join-flow buckets. - Cover IP partitioning, rotation resistance, required config fields, and updated fixture configs.

metrics: expose ops contract keys

2026-06-14T20:15:14Z

commit 32b02ea45824890518f482f77e6b87e4d39bd984 parent c7bf59b3aac5beb37223823aa5bdae6f33b0ccad Author: triesap Date: Sun, 14 Jun 2026 13:15:14 -0700 metrics: expose ops contract keys - serialize stable tangle-prefixed metrics from /metricsz - record auth event query event-bus and outbox counters - include live readiness disk usage and latency fields - prove metric keys through runtime ops and server tests

ops: make readiness live

2026-06-14T19:57:20Z

commit c7bf59b3aac5beb37223823aa5bdae6f33b0ccad parent a4131641c7f27893b3825254fe58648fbf3aff53 Author: triesap Date: Sun, 14 Jun 2026 12:57:20 -0700 ops: make readiness live - introduce a shared readiness handle for ops routes - expose event bus readiness in readyz checks - update server startup to mark the live bind state - cover live readiness changes and recovery readiness