glm-5.3-flash 31fb11cf83 door: the peer-pin fix — the UDP front door's same-IP lock + reply-port refresh (OQ-SK2-09 option 2) ...

- serve_on pins the client's source IP (parsed datagrams only —
  protocol garbage can never move the pin) and sends replies to the
  latest-seen port from that IP: a NAT port rebind under a stable IP
  keeps receiving (the review 003 S-1 residual, now fixed)
- the RFC 1928 MUST implemented: datagrams from a source IP other
  than the pinned one are dropped (previously every parsed datagram
  was forwarded regardless of source); the spoof primitive shrinks
  from any-source to same-IP off-path
- the residual (a full client IP change mid-association) stays the
  RFC's expected-peer posture — revisitable per OQ-SK2-09 (the
  control-conn-derived expected IP is the complete fix, ADR-shaped)
- two tests pin the new behavior: the NAT port-rebind follow (the
  old port stops receiving, the new one takes over) and the
  foreign-IP drop (no reply to the spoofer, the association healthy)

Verification: cargo test --features local (15 suites green, door-udp
38 tests), clippy --all-targets --all-features -D warnings clean,
fmt clean.

2026-09-28 09:15:05 +00:00

..

common

review: the batch-2 gate closed — the assembly layer verified, R-1/R-2 fixed

2026-09-26 08:24:32 +00:00

assembly-integration.rs

review: the batch-2 gate closed — the assembly layer verified, R-1/R-2 fixed

2026-09-26 08:24:32 +00:00

composed-accept.rs

review: the batch-2 gate closed — the assembly layer verified, R-1/R-2 fixed

2026-09-26 08:24:32 +00:00

composed-egress.rs

review-003 D-2: the composed-egress failure matrix pinned (eviction→association-end, relay exits, oversize guard)

2026-09-27 10:34:36 +00:00

consumer-associate.rs

consumer: AssociateSession — the framed datagram stage + e2e suite

2026-09-24 07:15:27 +00:00

consumer-bind.rs

consumer: the BIND reply#2 re-entry guard + session hygiene (review-002 C-1, D-1, N-6, S-2)

2026-09-24 11:58:55 +00:00

consumer-connect.rs

review 002: the protocol core reviewed — readiness-contract hardening + two convention fixes

2026-09-24 09:13:08 +00:00

core-integration.rs

tests: consolidate the duplicated harness shapes (review-002 N-5)

2026-09-25 03:39:01 +00:00

door-tcp.rs

review-003 N-8: the worthwhile residue probed — the BIND Domain-reply wire helper + table, the refusal-recode unit pins, the serve() wrappers, the len/is_empty accessors, the bridge later-batch garbage

2026-09-27 10:45:38 +00:00

door-udp.rs

door: the peer-pin fix — the UDP front door's same-IP lock + reply-port refresh (OQ-SK2-09 option 2)

2026-09-28 09:15:05 +00:00

harness.rs

review: the batch-2 gate closed — the assembly layer verified, R-1/R-2 fixed

2026-09-26 08:24:32 +00:00

local-backend-producer.rs

review: the batch-2 gate closed — the assembly layer verified, R-1/R-2 fixed

2026-09-26 08:24:32 +00:00

local-providers.rs

local: the socket-backed seam providers — tcp_dial / udp_egress / bind_accept

2026-09-25 05:55:27 +00:00

rfc1928-differential.rs

rfc1928: the keep-or-cut sweep + the honest refusal vocabulary (review-002 N-1, N-4)

2026-09-24 18:20:31 +00:00