route-explain v0.4.2

What's Changed

• Cross-link public project surfaces by @artur-panek in #8
• docs: add security guidance and issue forms by @artur-panek in #9
• Link routing evidence note from README by @artur-panek in #10
• Fix README links rendered on PyPI by @artur-panek in #11
• Release 0.4.2 by @artur-panek in #12
• Restore automatic release publishing by @artur-panek in #13

Full Changelog: v0.4.1...v0.4.2

route-explain v0.4.1

route-explain v0.4.1

Correctness hotfix following the first PyPI release.

Fixed

• consume real native nft monitor trace records instead of assuming JSON trace notifications
• group packet/rule/policy/mark events by nftables trace ID before flow correlation
• preserve observed input-interface state across later mark events
• surface nftables' monitor-start ruleset-cache limitation as a CHECK
• send explicit --protocol selectors into the kernel lookup even without ports
• avoid inventing TCP when neither protocol nor ports were requested
• keep TCP as the convenience default when ports are supplied without --protocol

Validation

• Python 3.11–3.14
• 39 tests
• Ruff
• wheel + sdist build
• twine check
• clean-wheel CLI smoke test

Upgrade

pipx upgrade route-explain

or:

uv tool upgrade route-explain

route-explain v0.4.0

route-explain v0.4.0

First PyPI release of route-explain, a read-only, kernel-backed Linux routing forensics CLI.

Highlights

• nftables runtime trace → observed mark/input-interface → kernel re-lookup correlation
• --expect-dev, --expect-table, and --expect-prefix automation assertions
• flow-scoped snapshots, replay, and before/after diff
• network namespace, PID, Docker, and Podman context
• routing doctor
• WireGuard AllowedIPs and Tailscale route context
• Python 3.11–3.14 support
• wheel + sdist packaging with Trusted Publishing

Install

pipx install route-explain

or:

uv tool install route-explain

The project remains read-only by default: it explains routing state rather than managing it.