smallwebwaf

4 Commits

Include renames

Author	SHA1	Message	Date
sneak	3911b1611c	Say which bytes the byte limits count, and what passing one does (closes #203 ) check / check (push) Successful in 4m13s Details Documents only. The byte limits and byte anomaly thresholds count body bytes, as SWW_BYTES_COUNT chooses them, with WebSocket traffic each way, once a response has ended; the request that passes a limit is not cut off and the client is banned. README.md, SPEC.md and docs/ now say so, and no longer call a response's bytes the request's. Also made plain: rate limits, the refusal threshold, SWRP_MAX_REQUEST_TIME_MS, SWW_LOOKUP_SOURCE, the metrics' byte series, and the SPEC.md claim about answering within SWRP_TIMEOUT_MS. EVALUATION.md is audited too; its survey facts and date are unchanged. Model: fable-5-1 (first audit); opus-5-5 (rework)	2026-11-09 01:33:48 +00:00
clawbot	beb503b233	Rename the program to sww and its deciding daemon to discriminator (closes #218 ) (#221 ) check / check (push) Failing after 1m34s Details	2026-11-07 06:51:06 +01:00
clawbot	344ce13c96	rproxy and servewaf replace the one-process smallwebwaf (closes #172 , closes #165 ) check / check (push) Failing after 14m44s Details `smallwebwaf` with no command now prints the commands and exits with status 2. The image runs rproxy, or servewaf with SMALLWEBWAF_COMMAND=servewaf. The passing-on code, its settings and its log fields and metric go. internal/proxy keeps the checks, answers, reports and own endpoints; its tests run through the real rproxy. The documents describe the pair. Judgement call: clients.json keeps token_refused, since state files refuse unknown fields. Deviation: script/gitea-requests sets SWWAF_LOG_REQUEST_HEADERS, to label requests. Partially verified: make example-app and make gitea-requests never built the image, as Ubuntu's snapshot service answered 5xx. Model: opus-5-5	2026-11-05 13:15:05 +01:00
clawbot	f408f42b28	SPEC, README and docs rewritten from scratch (closes #154 , closes #155 , closes #156 ) check / check (push) Canceled after 0s Details SPEC.md is the only place that says how smallwebwaf behaves and why; docs/ holds lists linking to it; the README is short and links to both. Passed independent review in round 8. Model: fable-5-1 (writing); opus-5-5 (review, merge)	2026-10-26 03:06:28 +01:00