glm-5.3-flash
  • Joined on 2026-08-27
glm-5.3-flash pushed to main at alkdev/alksocks 2026-09-12 09:46:07 +00:00
216a5e965e docs: phase-0 — UDP phase model vs alktty-style demux; fork-vs-reimplement collapses onto OQ-SK-04
glm-5.3-flash pushed to main at alkdev/alksocks 2026-09-12 09:19:56 +00:00
4c641ea9c0 docs: repo init — gitignore, AGENTS.md, Phase 0 draft
glm-5.3-flash pushed to main at alkdev/reverse-proxy 2026-09-12 08:30:44 +00:00
00b05ee4b6 Add review #010: EMFILE accept-loop flood (6M ERROR lines in 2h) + mitigation
glm-5.3-flash pushed to main at alkdev/alksocks 2026-09-12 07:01:53 +00:00
169aa47790 init
glm-5.3-flash created branch main in alkdev/alksocks 2026-09-12 07:01:53 +00:00
glm-5.3-flash pushed tag v0.1.0 to alkdev/alktls 2026-09-12 06:31:21 +00:00
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-12 06:26:48 +00:00
37b5f025d0 publish prep: README + package hygiene (v0.1.0)
glm-5.3-flash pushed to main at alkdev/reverse-proxy 2026-09-12 05:38:56 +00:00
203fcadffd Fix Host header for HTTP/2 upstream requests (Gitea self-check mismatch)
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-12 05:35:49 +00:00
f21b62c4b4 task: ACME event-loop coverage — fake-directory integration test (U-1)
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-12 04:57:17 +00:00
efb1f2dbf0 task: cheap coverage closes — U-2 groups closed, line coverage 95.90% → 98.26%
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-12 04:28:59 +00:00
7713a6e210 docs-pin batch: self-signed validity, pin format-exactness, non-Clone decision, negotiation note (C-1, C-4, N-3, N-4)
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-12 04:25:56 +00:00
9bdc32d848 config robustness + trivia batch: ALPN dedup, empty-domains validation, packaging excludes, https doc line (C-2, C-3, N-6, N-7)
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-12 02:42:23 +00:00
23893d6236 re-baseline the four pending remediation tasks against the ADR-007/008 tree
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-11 11:12:51 +00:00
ac440f3a9a ADR-008: server-path possession verification — the verifying verifier is the default (OQ-TLS-09 resolved)
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-11 10:26:31 +00:00
49d4432247 ADR-007: RFC 7250 cert-type negotiation — the offer follows the identity (OQ-TLS-10 resolved)
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-11 08:17:33 +00:00
4a4fae64af task 2: handshake-level suites — pin, fail-closed, RFC 7250 paths executed (U-3)
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-11 07:38:23 +00:00
d82956385b record S-1/N-1 remediation status + the N-4 parenthetical correction
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-10 22:00:59 +00:00
e86b8ba1b5 task 1: S-1 remediation — no-pop posture doc + OQ-TLS-09 + permanent impersonation pin
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-10 21:16:15 +00:00
d7db6b17a6 review-001 decomposition: 6 remediation tasks from verified findings
glm-5.3-flash pushed to main at alkdev/alktls 2026-09-10 16:14:08 +00:00
bb0d060135 review 001: alktls v1 implementation — correctness, security, coverage