Search results

Follow-up: extract peer_manager mod tests into peer_manager/tests.rs

Status: Open.

#120 In femboyisp/yip;

· vxfemboy opened on Jul 26, 2026

test-hygiene: run-netns-roaming.sh lacks a positive witness; 7 tunnel_netns.rs wrappers are structurally dead

Status: Open.

#110 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

test/bench: the one real WAN benchmark is not reproducible from the repo — reconstruct + commit an automated harness

Status: Open.

#109 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

refactor(yipd): split peer_manager.rs into a module directory (keep the struct whole)

Status: Open.

#108 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

ci: quality gates exclude the control-plane core (coverage skips yipd; mutation only 3 logic crates); no perf-regression gate

Status: Open.

#107 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

security(mesh): verify_record and verify_cert derive their CA anchor from different operator inputs — under-documented fail-closed footgun

Status: Open.

#106 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

security(anti-dpi): data-plane obf key is not rotated per epoch — 2^32 obf-nonce birthday bound over the whole connection lifetime

Status: Open.

#105 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

security(handshake): #34 anti-replay baseline is in-memory only — a restarted responder accepts one stale Init and learns endpoint from it

Status: Open.

#104 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

security(rendezvous): registration is replayable after TTL lapse + reg_seq resets on restart — use a wall-clock/TAI64N seq

Status: Open.

#103 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

security(mesh): resolver probes the unauthenticated PeerInfo.reflexive while verifying+discarding the record's signed endpoints; PunchTo has no record gate

Status: Open.

#102 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

security(relay): TLS-front registration is unauthenticated — any obf_psk holder hijacks a peer's relay route

Status: Open.

#101 In femboyisp/yip;

· vxfemboy opened on Jul 25, 2026

REALITY: P256/P384 server-side KEX + HelloRetryRequest support (evaluate whether it's worth it)

enhancementNew feature or requestNew feature or request

Status: Open.

#84 In femboyisp/yip;

· vxfemboy opened on Jul 17, 2026