sneak 79a2a00722 servewaf: each decision heuristic is its own module (closes #195) ...

Each check servewaf runs on a request is a type in its own file behind
one interface, heuristic, and is registered in one of four ordered lists
in heuristics.go. Order and behaviour are unchanged.

Every refusal or ban now logs heuristic, the name of the heuristic that
made it, and heuristic_figures, the figures it acted on. Both are in
docs/request-log.md, and SPEC.md names each heuristic at its step.

Model: opus-5-5

2026-11-06 19:17:11 +00:00

..

requestlog_test.go

rproxy, the proxy in front of each app, asks servewaf and fails open (closes #171)

2026-11-05 06:32:08 +01:00

requestlog.go

servewaf: each decision heuristic is its own module (closes #195)

2026-11-06 19:17:11 +00:00