ober/jerboa-secmonlib
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
47 commits 1 branch 0 tags 3.1 MiB
  • Scheme 81.6%
  • Shell 9.1%
  • Rust 4%
  • Python 2.3%
  • Makefile 2.1%
  • Other 0.9%
Find a file
Exact
Jaime Fournier 3798aca8ae docs: remove jerboa-emacs restriction
2026-07-30 15:47:17 -06:00
.builds ci: set umask 022 in package/verify tasks too (jerbuild creates group-writable cache dirs during pkg operations) 2026-07-22 13:10:58 -06:00
.jerboa Harden secmonlib release evidence privacy 2026-06-26 17:20:13 -06:00
bin fix: replay protection on the pull protocol (AAD-bound seq + per-direction keys) 2026-07-21 15:27:05 -06:00
docs Harden listener limits and toolchain verification 2026-07-11 17:25:23 -06:00
patches/jerboa-native-rs Harden listener limits and toolchain verification 2026-07-11 17:25:23 -06:00
scripts Harden listener limits and toolchain verification 2026-07-11 17:25:23 -06:00
src/secmon build: restore locked native binary build 2026-07-30 15:39:11 -06:00
support build: convert raw-Chez .sls library source to src/ .ss with generated .sls wrappers 2026-07-24 12:22:56 -06:00
tests fix: reject symlinked/non-regular database paths in open-event-store 2026-07-21 17:56:00 -06:00
.gitignore jpkg: complete binary package setup 2026-07-30 15:34:16 -06:00
.jerbuild Use vendored jsqlite 2026-06-14 21:24:04 -06:00
AGENTS.md docs: remove jerboa-emacs restriction 2026-07-30 15:47:17 -06:00
CLAUDE.md Use vendored jsqlite 2026-06-14 21:24:04 -06:00
dependency-lock.tsv build: restore locked native binary build 2026-07-30 15:39:11 -06:00
jpkg.lock jpkg: complete binary package setup 2026-07-30 15:34:16 -06:00
jpkg.policy.sexp jpkg: complete binary package setup 2026-07-30 15:34:16 -06:00
jpkg.sexp jpkg: complete binary package setup 2026-07-30 15:34:16 -06:00
LICENSE Switch to MIT license 2026-07-21 13:42:19 -06:00
Makefile build: convert raw-Chez .sls library source to src/ .ss with generated .sls wrappers 2026-07-24 12:22:56 -06:00
plan.md Use vendored jsqlite 2026-06-14 21:24:04 -06:00
README.md Harden listener limits and toolchain verification 2026-07-11 17:25:23 -06:00
SECURITY.md Security hardening and release readiness 2026-06-23 10:51:07 -06:00
slack.md Add Slang migration assessment and WASM implementation gap analysis 2026-04-01 18:01:57 -04:00
toolchain-lock.tsv build: refresh locked Jerboa toolchain 2026-07-30 15:34:27 -06:00
wasm-gaps.md Add Slang migration assessment and WASM implementation gap analysis 2026-04-01 18:01:57 -04:00

README.md

jerboa-secmonlib

Static Jerboa security-monitor agent, collector/analyzer source, and native FFI registration support.

The agent listener defaults to 127.0.0.1:31337, binds the requested numeric IPv4 address through the full socket path, and reports the OS-confirmed bound address. A fixed worker pool, bounded queue, global/per-source active and rate budgets, strict frames, and absolute authentication/idle read-and-write deadlines protect the pre-auth boundary from Slowloris/thread exhaustion. make test includes real non-loopback refusal, byte-drip, and non-reading-peer regressions.

This repo is not public-production-ready until make release-evidence is captured on the target Linux or FreeBSD release host and the blockers in docs/release-evidence.md are closed.