feat: bind approved destinations to TCP peers - #5

Merged

seonghobae merged 40 commits into

mainfrom

feat/direct-socket-binding

Aug 6, 2026

Commits on Aug 6, 2026

docs: design direct socket binding slice
seonghobae
committed
e7d4af7
docs: plan direct socket binding implementation
seonghobae
committed
7ad61be
test: require direct socket authority boundary
seonghobae
committed
c41fe97
test: require direct socket authority boundary
seonghobae
committed
1332804
test: specify direct connection policy bounds
seonghobae
committed
d058ce7
test: specify direct connection policy bounds
seonghobae
committed
ff019c0
test: specify direct connection policy bounds
seonghobae
committed
98b768b
test: specify direct connection policy bounds
seonghobae
committed
6393c93
test: specify direct connection policy bounds
seonghobae
committed
30add26
test: prove exact loopback peer binding
seonghobae
committed
6b2406f
test: specify bounded network error contracts
seonghobae
committed
8a780b3
feat: bind approved sockets to observed TCP peers
seonghobae
committed
91a56f8
fix: expose standard destination errors
seonghobae
committed
a7c1ae8
docs: define direct socket binding decision
seonghobae
committed
90fc555
docs: expose direct TCP peer authority
seonghobae
committed
1ba5e54
docs: add exact TCP peer boundary
seonghobae
committed
85455e4
docs: doctor exact TCP peer binding
seonghobae
committed
a71e221
docs: index direct socket authority
seonghobae
committed
83808bd
docs: advance roadmap through direct TCP proof
seonghobae
committed
7f4d29c
docs: record exact TCP peer binding
seonghobae
committed
3956df4
style: apply rustfmt to error contracts
seonghobae
committed
11e5f92
style: apply rustfmt to network exports
seonghobae
committed
a2d95cd
style: apply rustfmt to network error tests
seonghobae
committed
e86a03c
style: apply rustfmt to network policy tests
seonghobae
committed
ddb08cb
ci: repair direct socket coverage assertions
seonghobae
committed
337fc0a
test: close direct socket coverage branches
OpenCode Repair Agent
committed
0491598
docs: clarify bounded retry responsibility
seonghobae
committed
5820370
ci: refactor connector coverage path
seonghobae
committed
e5b1513
ci: harden connector coverage refactor
seonghobae
committed
48575ac
ci: make connector refactor whitespace-safe
seonghobae
committed
192a957
ci: retain connector coverage diagnostics
seonghobae
committed
6efaa24
ci: consolidate network tests for exact coverage
seonghobae
committed
950d551
ci: consolidate network tests deterministically
seonghobae
committed
b29558f
test: consolidate direct socket verification
OpenCode Repair Agent
committed
103fae4
docs: record consolidated socket verification
seonghobae
committed
e3cb08d
ci: harden IPv6 socket authority
seonghobae
committed
830614d
ci: retry IPv6 socket authority hardening
seonghobae
committed
23d2197
ci: finalize IPv6 socket authority hardening
seonghobae
committed
a4e0833
fix: reject unapproved IPv6 socket metadata
OpenCode Repair Agent
committed
9f98d43
docs: record canonical IPv6 socket metadata
seonghobae
committed
e587b5e