Scope audit: attribute every hop, verify declared regions, derive region keys (M0-M2) - #11

Merged

efiten merged 36 commits into

masterfrom

feat/auto-region-keys

Sep 7, 2026

Commits on Sep 7, 2026

docs(scopes): design spec for auto-derived region keys and scope-audit honesty

Erwin Fiten
and
claude
committed
b0cae9e
docs(plans): M1 implementation plan — scope-audit unmatched-traffic caveat

Erwin Fiten
and
claude
committed
4f56227
docs(plans): M2 implementation plan — auto-derived region keys

Erwin Fiten
and
claude
committed
b84bf62
docs(scopes): amend spec — forwarding is attributed to path[last] only

Erwin Fiten
and
claude
committed
b610d46
feat(scope-audit): caveat chip for regions this instance cannot name

Erwin Fiten
and
claude
committed
79f38ef
fix(scopes): attribute flood forwarding to every path hop, not just the last

Erwin Fiten
and
claude
committed
d93b446
docs(plans): sequence M1 and M2 behind M0, record what has landed

Erwin Fiten
and
claude
committed
380d87c
feat(scope-audit): count the unmatched packets ScopeAuditForwarding discards

Erwin Fiten
and
claude
committed
70e6bcd
feat(scope-audit): expose observedUnmatchedPackets on the API row

Erwin Fiten
and
claude
committed
ca464b5
docs(api): document observedUnmatchedPackets on GET /api/scope-audit

Erwin Fiten
and
claude
committed
93a0c38
docs(plans): record M1 as code-complete with verification deferred

Erwin Fiten
and
claude
committed
7673ccb
docs(scopes): amend spec — add M1b, declared-region verification

Erwin Fiten
and
claude
committed
55f46a1
docs(plans): M1b implementation plan — declared-region verification

Erwin Fiten
and
claude
committed
36435c6
feat(scope-audit): derive a region's on-wire code from a packet's own payload

Erwin Fiten
and
claude
committed
64e3ac6
feat(scope-audit): record which transmissions were unmatched, per target

Erwin Fiten
and
claude
committed
3e27b11
feat(scope-audit): narrow query for the window's unmatched transmissions

Erwin Fiten
and
claude
committed
409258c
fix(scope-audit): keep the empty-scope_name comment out of gofmt's reach

Erwin Fiten
and
claude
committed
e5cee74
feat(scope-audit): memoised declared-region verification with a 2-packet threshold

Erwin Fiten
and
claude
committed
28e310f
feat(scope-audit): verify declared regions against a repeater's own unnameable traffic

Erwin Fiten
and
claude
committed
985067f
feat(scope-audit): mark verified regions and narrow the caveat to what stays unexplained

Erwin Fiten
and
claude
committed
a813346
docs(api): document regionEvidence on GET /api/scope-audit

Erwin Fiten
and
claude
committed
a87ce8e
perf(scope-audit): cache verification per region, not per (region, packet)

Erwin Fiten
and
claude
committed
37b0473
docs(plans): record M1b as code-complete with deploy verification deferred

Erwin Fiten
and
claude
committed
82a0081
feat(ingestor): autoRegionKeys config block, default off

Erwin Fiten
and
claude
committed
ac8ff6d
feat(ingestor): candidate filter and deterministic ranking for derived region names

Erwin Fiten
and
claude
committed
b222421
feat(ingestor): two-tier regionKeySet behind an atomic snapshot

Erwin Fiten
and
claude
committed
068af8f
feat(ingestor): tiered scope matching with an explicit-over-derived tie-break

Erwin Fiten
and
claude
committed
46c50ff
feat(ingestor): thread the two-tier key set through the ingest path

Erwin Fiten
and
claude
committed
a19af37
docs(config): document the opt-in autoRegionKeys block

Erwin Fiten
and
claude
committed
757407f
fix(scope-repair): repair against the full key set, not just hashRegions

Erwin Fiten
and
claude
committed
a5575cb
test(ingestor): benchmark scope matching across key-set sizes

Erwin Fiten
and
claude
committed
2e2ae3a
docs(plans): record M2 as code-complete with two checks deferred

Erwin Fiten
and
claude
committed
73c0d7e
docs(plans): handover for the scope-audit work

Erwin Fiten
and
claude
committed
e872530
perf(scope-audit): read the per-transmission columns once, not once per hop

efiten
and
claude
committed
942761c
perf(scope-audit): collapse concurrent cold requests, and give 7d its own TTL

efiten
and
claude
committed
b7515ce
docs: record what the first staging deploy measured

efiten
and
claude
committed
cdbeda3

Navigation Menu

Scope audit: attribute every hop, verify declared regions, derive region keys (M0-M2) - #11

Scope audit: attribute every hop, verify declared regions, derive region keys (M0-M2)#11
efiten merged 36 commits into
masterfrom
feat/auto-region-keys

Commits on Sep 7, 2026

docs(scopes): design spec for auto-derived region keys and scope-audit honesty

docs(plans): M1 implementation plan — scope-audit unmatched-traffic caveat

docs(plans): M2 implementation plan — auto-derived region keys

docs(scopes): amend spec — forwarding is attributed to path[last] only

feat(scope-audit): caveat chip for regions this instance cannot name

fix(scopes): attribute flood forwarding to every path hop, not just the last

docs(plans): sequence M1 and M2 behind M0, record what has landed

feat(scope-audit): count the unmatched packets ScopeAuditForwarding discards

feat(scope-audit): expose observedUnmatchedPackets on the API row

docs(api): document observedUnmatchedPackets on GET /api/scope-audit

docs(plans): record M1 as code-complete with verification deferred

docs(scopes): amend spec — add M1b, declared-region verification

docs(plans): M1b implementation plan — declared-region verification

feat(scope-audit): derive a region's on-wire code from a packet's own payload

feat(scope-audit): record which transmissions were unmatched, per target

feat(scope-audit): narrow query for the window's unmatched transmissions

fix(scope-audit): keep the empty-scope_name comment out of gofmt's reach

feat(scope-audit): memoised declared-region verification with a 2-packet threshold

feat(scope-audit): verify declared regions against a repeater's own unnameable traffic

feat(scope-audit): mark verified regions and narrow the caveat to what stays unexplained

docs(api): document regionEvidence on GET /api/scope-audit

perf(scope-audit): cache verification per region, not per (region, packet)

docs(plans): record M1b as code-complete with deploy verification deferred

feat(ingestor): autoRegionKeys config block, default off

feat(ingestor): candidate filter and deterministic ranking for derived region names

feat(ingestor): two-tier regionKeySet behind an atomic snapshot

feat(ingestor): tiered scope matching with an explicit-over-derived tie-break

feat(ingestor): thread the two-tier key set through the ingest path

docs(config): document the opt-in autoRegionKeys block

fix(scope-repair): repair against the full key set, not just hashRegions

test(ingestor): benchmark scope matching across key-set sizes

docs(plans): record M2 as code-complete with two checks deferred

docs(plans): handover for the scope-audit work

perf(scope-audit): read the per-transmission columns once, not once per hop

perf(scope-audit): collapse concurrent cold requests, and give 7d its own TTL

docs: record what the first staging deploy measured