v1.9.0-jf.15.31

Fixes

• Fixes encrypted tunnel replay-window poisoning from decrypt-failed high-counter packets.
• Replay counters are now recorded only after AEAD authentication succeeds.
• Stale or duplicate authenticated nonces are still rejected and still trigger the existing recovery path.

Validation

• go test ./pkg/daemon -run 'TestDecryptFailureDoesNotAdvanceReplayHighWater|TestDecryptFailureDoesNotPoisonLaterValidPacket|TestPostDecryptDuplicateDropsSecondPacket|TestReplayPrecheckCanBeInvalidatedBeforeRecord' -count=1 -v\n- go test ./pkg/daemon -race -run 'TestDecryptFailureDoesNotPoisonLaterValidPacket|TestPostDecryptDuplicateDropsSecondPacket' -count=1 -v\n- Local UDP dispatch scratch E2E: tampered high-counter frame failed AEAD without advancing maxRecvNonce, then a valid lower fresh encrypted packet was delivered.\n- go test ./tests -run 'TestTunnelEncryption$|TestAuthenticatedKeyExchange$' -count=1 -v\n- Full repo verification before release: go test ./pkg/daemon -count=1, go test ./... -count=1, go build ./cmd/daemon ./cmd/pilotctl ./cmd/pilot-rendezvous.\n\n## Related\n\n- Closes #4.\n- Includes PRs #5, #6, and #7.

v1.9.0-jf.15.30

Full Changelog: v1.9.0-jf.15.29...v1.9.0-jf.15.30

v1.9.0-jf.15.29

WHAT

Pilot fork release for trusted peer public-key backfill.

WHY

Older trusted-peer records could carry an empty public key after restarts. Entmoot route checks then saw peers as trusted in process state but unusable for encrypted routing.

RESULTS

• Local go test ./... passed via the pre-push hook.
• make release produced linux/darwin amd64/arm64 archives and checksums.

CHANGES

• Backfills missing trusted peer public keys from known identity sources.
• Documents the release in CHANGELOG.md.

NEXT STEPS

Install on peers before Entmoot runtime route verification.

v1.9.0-jf.15.28

Pilot fork release v1.9.0-jf.15.28.\n\nIncludes relay TURN routing recovery fixes for strict outbound TURN paths, rendezvous endpoint refresh behavior, async relay TURN resolver invalidation, and live-socket discovery buffering.

v1.9.0-jf.15.27

Full Changelog: v1.9.0-jf.15.26...v1.9.0-jf.15.27

v1.9.0-jf.15.26

Full Changelog: v1.9.0-jf.15.25...v1.9.0-jf.15.26

v1.9.0-jf.15.25

Full Changelog: v1.9.0-jf.15.24...v1.9.0-jf.15.25

v1.9.0-jf.15.24

Release v1.9.0-jf.15.24 of the jerryfane Pilot fork.\n\nAdds reliable pending-handshake IPC notifications for Entmoot onboarding and documents the prior identity lookup IPC release.

v1.9.0-jf.15.23

Full Changelog: v1.9.0-jf.15.22...v1.9.0-jf.15.23

v1.9.0-jf.15.22

Full Changelog: v1.9.0-jf.15.20...v1.9.0-jf.15.22