Jon Chery 8d1cdceb5c feat(P15.5): threat model (C-19) + ingress hybrid (R-017, REQ-099..102) + doctor mTLS (REQ-118) ...

Sub-wave 1: internal/emitter/nft.go (nftables emitter, DNAT :443→127.0.0.1:8443, rate-limit, SYN-flood filter); Traefik static config 127.0.0.1:8443 binding (D-220); orca doctor nft; orca nft CLI (show/diff/doctor/country-block/rate-limit).
Sub-wave 2: docs/threat-model.md (R-017 trust boundary, R-020 deadlock, D-234 secret exclusion, orca user blast radius, step-ca SPOF); orca doctor mTLS (chain verification + live handshake probe, C5).

---ci---
project: orca
phase: 15.5
milestone: v0.11
status: execute
---/ci---

2026-08-07 08:35:06 +00:00

..

drift_path_test.go

feat(P10b): drift detection (R-018/R-019/R-020, REQ-103..113)

2026-08-07 07:17:41 +00:00

drift_path.go

feat(P10b): drift detection (R-018/R-019/R-020, REQ-103..113)

2026-08-07 07:17:41 +00:00

emitter_test.go

feat(P0c): Job/Service/DaemonSet schemas + emitter interface + systemd stub (REQ-074)

2026-08-05 17:17:02 +00:00

emitter.go

feat(P0c): Job/Service/DaemonSet schemas + emitter interface + systemd stub (REQ-074)

2026-08-05 17:17:02 +00:00

nft_test.go

feat(P15.5): threat model (C-19) + ingress hybrid (R-017, REQ-099..102) + doctor mTLS (REQ-118)

2026-08-07 08:35:06 +00:00

nft.go

feat(P15.5): threat model (C-19) + ingress hybrid (R-017, REQ-099..102) + doctor mTLS (REQ-118)

2026-08-07 08:35:06 +00:00

socket_test.go

feat(P03,P04,P08): update stanza + lifecycle hooks + socket plumbing

2026-08-05 17:55:11 +00:00

socket.go

feat(P03,P04,P08): update stanza + lifecycle hooks + socket plumbing

2026-08-05 17:55:11 +00:00

syncthing_test.go

feat(P09): Syncthing storage replication + conflict resolution (REQ-081; gates C-02, C-14)

2026-08-05 18:38:49 +00:00

syncthing.go

feat(P09): Syncthing storage replication + conflict resolution (REQ-081; gates C-02, C-14)

2026-08-05 18:38:49 +00:00

systemd_lifecycle_test.go

feat(P03,P04,P08): update stanza + lifecycle hooks + socket plumbing

2026-08-05 17:55:11 +00:00

systemd_test.go

feat(P06): task groups — multi-process services, multiple systemd units per alloc

2026-08-05 18:20:05 +00:00

systemd.go

feat(P06): task groups — multi-process services, multiple systemd units per alloc

2026-08-05 18:20:05 +00:00

traefik_atomic_test.go

feat(P02): Service block + Traefik emitter + atomic reload (REQ-077, gate C-10)

2026-08-05 17:48:04 +00:00

traefik_atomic.go

feat(P02): Service block + Traefik emitter + atomic reload (REQ-077, gate C-10)

2026-08-05 17:48:04 +00:00

traefik_test.go

feat(P15.5): threat model (C-19) + ingress hybrid (R-017, REQ-099..102) + doctor mTLS (REQ-118)

2026-08-07 08:35:06 +00:00

traefik.go

feat(P15.5): threat model (C-19) + ingress hybrid (R-017, REQ-099..102) + doctor mTLS (REQ-118)

2026-08-07 08:35:06 +00:00

update_test.go

feat(P03,P04,P08): update stanza + lifecycle hooks + socket plumbing

2026-08-05 17:55:11 +00:00

update.go

feat(P03,P04,P08): update stanza + lifecycle hooks + socket plumbing

2026-08-05 17:55:11 +00:00