mirror of https://github.com/wweir/sower.git synced 2026-10-20 08:16:35 +00:00

Files

T

wweir 2de08e62e4 fix(sower): guard the direct dial path against self-targeting too

DialSmart can reach directDial without passing DialProxyOnly (a direct rule
match, or an access probe that marks the name reachable), and a direct dial
back into this client's own proxy listener is a self-sustaining loop that
never leaves the host. Guard both entries; the second check is a cache hit.

2026-10-12 19:35:38 +08:00

plans

fix(sower): guard the direct dial path against self-targeting too

2026-10-12 19:35:38 +08:00

README.md

docs: security model for the sowerd edge; document the unknown-SNI cert fallback

2026-09-18 18:05:02 +08:00

security.md

fix(sowerd): give the service a soft heap ceiling on every install path

2026-10-12 17:58:08 +08:00

README.md

Documentation Index

This directory contains long-lived design documents. Per AGENTS.md rules:

docs/ root holds only finalized, authoritative design documents (product, architecture, protocol, security, deployment, data model, test strategy, etc.).
docs/plans/ holds draft proposals and in-progress implementation plans — not authoritative.
docs/reviews/ holds review records, issue lists, and retrospective summaries — not authoritative.

When a plan or review produces a durable rule, it must be written back to the relevant root-level design document and referenced from this index.

Cross-document references must point to root-level design documents only. Never reference protocol, field, security, or deployment rules from plans/ or reviews/.

Root-Level Documents

Document	Description
ARCHITECTURE.md	System boundary, layer responsibilities, data flows, design decisions
security.md	sowerd edge threat model, anti-probing layers, unknown-SNI certificate fallback, rejected directions

Plans

Historical plans live under docs/plans/ and are not authoritative. Durable rules from completed plans are reflected only in the root-level documents listed above.

Reviews

No reviews yet.