wweir 5dc57bc234 docs: security model for the sowerd edge; document the unknown-SNI cert fallback ...

Review of the anti-probing hardening found no code defects; the fixes
are documentation:

- docs/security.md: authoritative threat model, the three camouflage
  layers, unknown-SNI certificate fallback rules (whitelist source,
  error surfacing, capability propagation, concrete first entry), the
  client_hello fingerprint knob, rejected directions (QUIC, h2) with
  evidence, and residual accepted signals.
- Promote the plan doc to a non-authoritative historical record per
  AGENTS.md docs rules; index security.md from docs/README.md and
  ARCHITECTURE.md.
- config/sowerd.toml: document cert.domains; the first entry answers
  unknown-SNI handshakes.

2026-09-18 18:05:02 +08:00

..

2026-09-18-sowerd-antiprobe-hardening.md

docs: security model for the sowerd edge; document the unknown-SNI cert fallback

2026-09-18 18:05:02 +08:00

admin-console.md

docs: reflect hand-maintained shadcn-style UI without bits-ui

2026-08-20 18:15:23 +08:00

admin-persistence-config.md

docs: complete admin configuration and plan status updates

2026-08-09 21:18:40 +08:00

site-routing.md

docs: update docs and config examples for trojan removal

2026-06-25 09:20:37 +08:00