feat: brute-force telemetry (attempt_status, /attempts) and security hardening - #8

Open

ethicnology wants to merge 31 commits into

mainfrom

feat/bruteforce-telemetry

Commits on Aug 3, 2026

feat: /stats endpoint with brute-force telemetry
ethicnology
committed
b3fd36f
feat: report and reset failed_attempts on successful fetch/trash
ethicnology
committed
ac91e3d

Commits on Aug 4, 2026

fix: reject non-positive rate-limit configuration at startup
ethicnology
committed
087e71b
fix: survive concurrent writes with SQLite busy_timeout
ethicnology
committed
139ea78
fix: make the rate-limit check-and-increment atomic
ethicnology
committed
bcd7916
fix: expire rate-limit entries after the cooldown
ethicnology
committed
ce95198
chore: move axum-test to dev-dependencies
ethicnology
committed
71cb0d0
chore: update dependencies (RUSTSEC bytes/time/idna, diesel 2.3, dotenvy, sha2 0.10)
ethicnology
committed
b5a3bca
test: characterize the external audit claims (F1, F2, F3, F9, F11, F12)
ethicnology
committed
5407983
fix: make /store idempotent to close the authentication_key oracle
ethicnology
committed
2f65e05
fix: return 500 without consuming attempts on database errors
ethicnology
committed
ab04cfc
ci: run cargo test and cargo audit on push
ethicnology
committed
3c953f0
docs+fix: document Tor onion deployment, warn on non-loopback bind
ethicnology
committed
653f575
fix: run blocking diesel work on blocking threads
ethicnology
committed
ec0d403
fix: remove wildcard CORS layers
ethicnology
committed
fb819f6
fix: canonicalize hex inputs to lowercase
ethicnology
committed
a7a64c4
feat: structured logging with tracing (counts and events, never identifiers or bodies)
ethicnology
committed
cfa8c39
fix: dampen unauthenticated writes with a global token bucket
ethicnology
committed
91d9177
fix: bound request duration, document the recovery lockout tension
ethicnology
committed
5f2467c
chore: bump tracing-subscriber to 0.3.20 (RUSTSEC-2025-0055) and tokio
ethicnology
committed
4d02636
chore: review cleanups (clippy, single-lock refund, document store rate-limit env)
ethicnology
committed
0203803
fix: harden anonymous secret operations
ethicnology
committed
ee9f29a
docs: specify production resource guardrails
ethicnology
committed
0d556a4

Navigation Menu

Uh oh!

feat: brute-force telemetry (attempt_status, /attempts) and security hardening - #8

feat: brute-force telemetry (attempt_status, /attempts) and security hardening#8
ethicnology wants to merge 31 commits into
mainfrom
feat/bruteforce-telemetry

Commits on Aug 3, 2026

feat: /stats endpoint with brute-force telemetry

feat: report and reset failed_attempts on successful fetch/trash

Commits on Aug 4, 2026

fix: reject non-positive rate-limit configuration at startup

fix: survive concurrent writes with SQLite busy_timeout

fix: make the rate-limit check-and-increment atomic

fix: expire rate-limit entries after the cooldown

chore: move axum-test to dev-dependencies

chore: update dependencies (RUSTSEC bytes/time/idna, diesel 2.3, dotenvy, sha2 0.10)

test: characterize the external audit claims (F1, F2, F3, F9, F11, F12)

fix: make /store idempotent to close the authentication_key oracle

fix: return 500 without consuming attempts on database errors

ci: run cargo test and cargo audit on push

docs+fix: document Tor onion deployment, warn on non-loopback bind

fix: run blocking diesel work on blocking threads

fix: remove wildcard CORS layers

fix: canonicalize hex inputs to lowercase

feat: structured logging with tracing (counts and events, never identifiers or bodies)

fix: dampen unauthenticated writes with a global token bucket

fix: bound request duration, document the recovery lockout tension

chore: bump tracing-subscriber to 0.3.20 (RUSTSEC-2025-0055) and tokio

chore: review cleanups (clippy, single-lock refund, document store rate-limit env)

fix: harden anonymous secret operations

docs: specify production resource guardrails

Commits on Aug 5, 2026

feat: report attempt_status on successful fetch/trash

feat: replace /stats with cached /attempts telemetry snapshot

feat: expose attempts collection metadata on /info

fix: origin-aware warrant canary live reload and startup capacity bounds

fix: harden request handling (validation order, weak ETag comparison)

chore: trim tokio features and apply clippy suggestion

ci: re-audit the pinned Cargo.lock daily

docs: canary signaling, timestamp precision, nginx 304 caveat, torrc PoW