..
2026-04-21-eye-remote-integration-design.md
2026-04-23-eye-remote-bootstrap-design.md
2026-04-24-eye-remote-touchscreen-controller-design.md
2026-04-26-eye-remote-swiss-army-design.md
2026-05-02-haproxy-webui-enhancement-design.md
2026-05-03-mitmproxy-waf-migration-design.md
2026-05-05-openwrt-to-debian-migration-design.md
2026-05-10-meta-script-generator-design.md
2026-05-11-secubox-apt-clone-design.md
2026-05-12-apt-public-repo-staging-design.md
2026-05-12-gitea-repair-design.md
2026-05-12-license-headers-design.md
2026-05-12-metablog-gitea-ingest-design.md
2026-05-12-metablog-site-schema-design.md
2026-05-12-metablog-version-dashboard-design.md
2026-05-12-multi-agent-worktree-workflow-design.md
2026-05-12-opad-doctrine-design.md
2026-05-12-ssl-health-banner-design.md
2026-05-12-streamlit-gitea-version-pinning-design.md
2026-05-12-visitor-origin-feed-design.md
2026-05-12-webui-obfuscation-design.md
2026-05-13-eye-square-phase3-python-kiosk-design.md
2026-05-13-eye-square-variant-design.md
2026-05-13-metablog-deploy-webhook-design.md
2026-05-13-secubox-users-auth-design.md
2026-05-13-task18-regression-gate-report.txt
2026-05-14-converged-dashboard-design.md
2026-05-15-mail-phase2-rspamd-design.md
2026-05-15-mail-stack-architecture-design.md
2026-05-16-eye-remote-multi-gadget-dhcp-pairing-design.md
2026-05-18-dropletctl-design.md
2026-05-20-secubox-iot-hub-webui.md
2026-05-20-secubox-sentinelle-gsm.md
2026-05-20-secubox-sso-bridge.md
2026-05-20-secubox-wall-ep06.md
2026-05-20-secubox-zigbee-mqtt-iot-stack.md
2026-06-16-security-posture-rewrite-design.md
2026-06-16-toolbox-ttfb-stream-inject-design.md
2026-06-17-anti-track-v2-plan2a-learning-design.md
2026-06-17-anti-track-v2-plan2b-dns-design.md
docs: Anti-Track v2 Plan 2b-DNS design (unbound NXDOMAIN, live-verified topology) (ref #633 )
2026-06-17 13:39:57 +02:00
2026-06-17-anti-track-v2-plan2b-enforcement-design.md
docs: Anti-Track v2 Plan 2b enforcement design (DNS-refuse + exclusive-IP nft-drop) (ref #633 )
2026-06-17 12:49:21 +02:00
2026-06-17-anti-track-v2-plan2c-bypass-seed-design.md
docs: amend Plan 2c spec — missing /list endpoint is the real bug; seed exists inline (ref #633 )
2026-06-17 13:59:08 +02:00
2026-06-17-anti-track-v2-plan2d-social-top5-design.md
docs: Anti-Track v2 Plan 2d #social top-5 design (ref #633 )
2026-06-17 14:45:36 +02:00
2026-06-17-anti-tracking-v2-design.md
docs: anti-tracking v2 design — layered block/poison/anonymize
2026-06-17 15:15:28 +02:00
2026-06-17-banner-stream-inject-csp-r3-fix-design.md
docs: #636 amend — retract Bug2 (R3 report-url correct); real residual is bundle cache key (ref #636 )
2026-06-17 14:32:49 +02:00
2026-06-17-haproxy-vhost-auto-discovery-design.md
2026-06-17-social-ip-literal-fix-design.md
docs: #642 social IP-literal fix design + plan (ref #642 )
2026-06-17 16:58:28 +02:00
2026-06-17-toolbox-clients-reset-all-and-emojis-design.md
docs: #clients reset-all ( #634 ) + device/geo emojis ( #635 ) design (ref #634 )
2026-06-17 15:58:46 +02:00
2026-06-18-ad-intelligence.md
docs: spec for Ad Intelligence — learn/act/measure + #ads tab ( #656 )
2026-06-18 13:04:53 +02:00
2026-06-18-hub-dashboard-latency-design.md
docs: spec + plan for hub dashboard latency fix (ref #644 )
2026-06-18 08:45:31 +02:00
2026-06-18-mitm-engine-migration-analysis.md
feat( #662 Phase 1): MITM-engine migration analysis + phased plan + compiled/tested Go forging-MITM PoC
2026-06-18 17:07:48 +02:00
2026-06-18-mitm-engine-phase2-bench.md
feat( #662 Phase 2b): parallel handshake bench — Go core scales 3.4x at 4 cores (multi-core gate settled)
2026-06-18 17:23:23 +02:00
2026-06-18-toolbox-selective-sni-splice.md
docs: spec for toolbox selective SNI-splice (Lever A, #649 )
2026-06-18 11:04:26 +02:00
2026-06-18-waf-engine-migration-analysis.md
docs: WAF engine migration feasibility analysis (Coraza+CRS via HAProxy SPOA) (ref #662 )
2026-06-18 22:31:12 +02:00
2026-06-19-kbin-tor-anonymized-surfing-design.md
feat(toolbox): kbin Tor egress quick-switch — switch + tunnel, DARK (ref #683 )
2026-06-19 12:19:52 +02:00
2026-06-26-cookies-crosssite-trackers-design.md
docs(cookies): design spec — cross-site tracker detection surface (ref #749 )
2026-06-26 17:58:36 +02:00
2026-06-26-waf-go-sbxwaf-design.md
docs(spec): WAF→Go bench targets to >5×/p99<⅓, blocking go/no-go (ref #744 )
2026-06-26 11:52:44 +02:00
2026-06-27-nft-based-network-stats-design.md
docs(netstats): design spec — nft-based network stats dashboard (ref #758 )
2026-06-27 10:14:23 +02:00
2026-06-27-sw-neuter-targeted-autolearn-design.md
docs(toolbox-ng): design spec — targeted SW-neuter for the R3 banner (ref #753 )
2026-06-27 08:13:13 +02:00
2026-06-29-gondwana-phase1-mesh-substrate-design.md
docs(gondwana): rendezvous-as-role + per-node DDNS + distributed directory
2026-06-29 10:33:19 +02:00
2026-06-29-secubox-appstore-module-manager-sketch.md
docs(appstore): SecuBox App Store + Module Composer architecture sketch + GPT prompt
2026-06-29 13:09:15 +02:00
2026-06-30-annuaire-miroir-trust-substrate-design.md
docs(annuaire): Annuaire·Miroir — federated self-certifying trust-substrate design
2026-06-30 06:27:09 +02:00
2026-06-30-macro-subsystem-tor-exit-design.md
docs(macro): M2 design spec — macro subsystem + tor-exit reference kind (secubox-macro)
2026-06-30 17:15:44 +02:00
2026-06-30-p2p-annuaire-service-registry-design.md
docs(p2p): design spec — p2p Service Registry as live view of annuaire catalog (M1) + deferred macro subsystem
2026-06-30 11:41:54 +02:00
2026-07-02-p2p-dht-federation-masterlink-design.md
secubox-p2p: Kademlia DHT + federation health-checks + hierarchical master-link ( #774 ) ( #775 )
2026-07-03 06:59:35 +02:00
2026-07-02-toolbox-cert-mismatch-warn-design.md
docs(spec): toolbox cert-mismatch warn-and-allow (no 502) design
2026-07-02 10:04:49 +02:00
2026-07-03-rapport-kbin-media-types-design.md
Rapport kbin fidèle (PDF donut-grids + media types) + WebUI DPI + incident hardening ( #787 )
2026-07-03 12:27:28 +02:00
2026-07-03-secubox-proxypac-mesh-routing-design.md
feat(proxypac): WPAD/PAC auto-config routing to active mesh services ( Closes #784 ) ( #788 )
2026-07-03 11:57:26 +02:00
2026-07-04-media-buffer-design.md
feat: SecuBox Media Buffer Phase 1 — dashcam capture + replay + metatag lifecycle ( #814 )
2026-07-04 18:15:58 +02:00
2026-07-04-mesh-federate-exclusion-lists-design.md
docs(spec): mesh-federate toolbox exclusion lists ( #806 )
2026-07-04 17:01:16 +02:00
2026-07-04-pdf-character-sheet-design.md
PDF report: rich character sheet + route parity + real Quêtes ( #794 )
2026-07-04 06:31:30 +02:00
2026-07-04-peertube-webui-admin-ops-design.md
PeerTube WebUI: admin reset-password + version check/upgrade ( #800 )
2026-07-04 10:12:08 +02:00
2026-07-04-vhost-exposure-switch-design.md
docs(spec): per-vhost exposure switch (localhost/LAN/WAN + mesh/Tor) design (ref #793 )
2026-07-04 06:24:58 +02:00
2026-07-05-device-guardian-consolidation-design.md
feat( #817 ): Device Guardian consolidation — merge 5 device modules into secubox-nac (Project A) ( #818 )
2026-07-13 09:58:01 +02:00
2026-07-06-frigate-foundation-design.md
feat(frigate): Frigate NVR Foundation — podman-in-LXC on amd64 + /api/v1/frigate shim ( #821 ) ( #822 )
2026-07-06 11:53:20 +02:00
2026-07-06-sbxmitm-sentinel-design.md
feat(sentinel): sbxmitm Sentinel — inline+async exploit/malware/spyware detection engine ( #823 ) ( #824 )
2026-07-06 15:53:21 +02:00
2026-07-06-sentinel-activation-toolbox-tab-design.md
feat(toolbox): activate Sentinel + surface compromise detections (WebUI tab · kbin report · PDF) — ref #823 ( #825 )
2026-07-06 17:39:42 +02:00
2026-07-07-sentinel-c2-autolearn-design.md
feat(sentinel): C2/botnet auto-learning — high-precision, report-only ( Closes #826 ) ( #827 )
2026-07-07 07:46:19 +02:00
2026-07-08-c3box-kernel-migration-design.md
docs: c3box kernel migration design (6.12.85 + one-shot boot guard)
2026-07-08 13:15:31 +02:00
2026-07-08-nextcloud-dashboard-real-manageable-design.md
docs: spec — Nextcloud dashboard real data + manageable users (ref #429 )
2026-07-08 07:13:39 +02:00
2026-07-09-openclaw-lxc-scanner-design.md
docs: openclaw spec — correct LXC path (/data/lxc) + free IP (.41, .30 taken by matrix)
2026-07-09 05:11:56 +02:00
2026-07-09-tor-enhancement-design.md
docs(tor-spec): add feature 6 — obfs4 bridges (Niveau-1 anti-censorship, entry-side)
2026-07-09 07:53:53 +02:00
2026-07-11-metablogizer-publisher-wizard-design.md
docs: design spec for MetaBlogizer Publisher Wizard
2026-07-11 12:36:33 +02:00
2026-07-17-cve-alertes-design.md
docs(spec): CVE — distinguer les deux buts aux filtres opposés
2026-07-17 17:37:03 +02:00
2026-07-17-profils-modules-design.md
docs(spec): conception du système de profils & activation de modules
2026-07-17 11:29:04 +02:00
2026-07-17-sbxwaf-mode-detect-design.md
docs(spec): sbxwaf mode detect — essayer une règle avant de l'armer
2026-07-17 15:36:02 +02:00
2026-07-17-sbxwaf-mode-escalate-design.md
docs(spec): sbxwaf mode escalate — observer puis bannir un scanner récidiviste
2026-07-17 18:02:34 +02:00
2026-07-18-profiles-tiers-and-installer-export-design.md
docs(profiles): spec for functional tiers + installer export
2026-07-18 11:04:08 +02:00
2026-07-18-waf-product-absent-generator-design.md
docs(spec): générateur de règles WAF "produit absent"
2026-07-18 05:13:23 +02:00
2026-07-19-profiles-apply-phase3a-design.md
docs(profiles): spec Phase 3a — apply actuator (validated on lyrion)
2026-07-19 07:16:17 +02:00
2026-07-19-profiles-apply-webui-ctl-design.md
docs(profiles): spec — API/panel apply+rollback via webui→ctl (NNP=false + sudoers)
2026-07-19 09:24:13 +02:00
2026-07-19-sbxwaf-static-asset-detect-design.md
docs(sbxwaf): spec — detect/escalate fingerprinting on static-asset paths (Option B)
2026-07-19 05:42:01 +02:00
2026-07-20-profiles-actuation-robustness-design.md
docs(profiles): spec — actuation robustness, observed-state arbiter (ref #893 )
2026-07-20 03:47:58 +02:00
2026-07-20-scale-to-zero-public-services-design.md
fix(profiles): default lifecycle is always-on, not eager (ref #896 )
2026-07-20 18:11:24 +02:00
2026-07-22-secubox-meshtastic-multigrid-design.md
fix(meshtastic): final review — panel webui→ctl wiring (NNP+sudoers user) + mosquitto Recommends + minors (ref #897 )
2026-07-22 09:02:55 +02:00
2026-07-23-email-tracking-pixel-detection-design.md
docs(spec): détection des pixels de suivi (web + email) — design validé
2026-07-23 13:14:11 +02:00
2026-07-23-picobrew-brewing-suite-design.md
docs(spec): secubox-picobrew — suite brassage/fermentation/distillation en LXC
2026-07-23 16:55:11 +02:00
