v0.7.0

v0.7.0: FoxIO JA4 TLS & JA4H HTTP Fingerprinting, Decoupled Security …

v0.6.0: Ring-0 Linux splice(2) Zero-Copy, Keep-Alive Pool & Zero-Alloc SNI

Propylea v0.6.0: Sovereign L7 Gateway with Ring-0 Splicing & Keep-Alive Pooling

• Ring-0 Linux splice(2) Pipe Splicer: Direct kernel page-descriptor movement between sockets (libc::pipe2 tuned to 64 KiB) bypassing user-space memory copies and context switches.
• Pre-TLS Layer-4 SNI Passthrough: Resolves SNI from raw ClientHello in <100ns and splices streams directly to upstream vaults without user-space TLS overhead.
• Keep-Alive Pool with Kernel MSG_PEEK Desync Eviction: Pools warm HTTP/1.1 connections with non-blocking kernel probing to evict dead sockets or response-queue smuggling before reuse.
• Zero-Allocation Host & SNI Router: Strict RFC 5890 DNS label validation blocking path traversals, null bytes, and oversized hostnames.

v0.5.0

Propylea v0.5.0: Fleet Deception Mesh Sync & Zero-Downtime Multi-Doma…

Propylea v0.4.0 — Synthetic Mirage Active Deception, Surface Auditor & Phylax v0.3.0

🏛️ Propylea v0.4.0 — Synthetic Mirage Active Deception, Surface Auditor & Phylax v0.3.0

• Synthetic Mirage Active Deception (enable_mirage = true): Integrates phylax::mirage::MirageEngine (v0.3.0) at the L7 reverse proxy boundary to poison automated scanners probing decoy honeyroutes (/.env, /.git/config, /wp-login.php, /dump.sql, /id_rsa) with realistic 200 OK payloads and attacker-bound HMAC-SHA256 canary tokens while recording SQLite WAL quarantine infractions.
• Outside-In Attack Surface Exposure Auditor (propylea audit-surface): Built-in CLI diagnostic engine auditing propylea.toml against 12 canonical scanner vectors and security headers (HSTS, X-Content-Type-Options, X-Frame-Options) to grade perimeter posture (A+ Sovereign Mirage Fortress).
• Adversarial TDD Verification: 58/58 unit, integration, and adversarial tests passing.

v0.3.5

v0.3.5: Crucible test gate PayloadGuard parity & sanitized documentation

v0.3.4

Release v0.3.4

v0.3.3

Propylea v0.3.3: 7-Vector Adversarial PayloadGuard & Phylax v0.2.6 Edge Defense

• Full 7-Vector Adversarial PayloadGuard Integration: Zero-allocation, zero-copy percent-decoding inspection across all incoming request paths, headers, and query strings directly at the L7 reverse proxy boundary.
• OWASP & Kali Tools Deflection: Neutralizes SQLi, Directory Traversal, RCE shell injection, XSS, SSRF/Metadata probes (169.254.169.254), SSTI ({{7*7}}), and NoSQL operator attacks with RFC 9309 403 Forbidden.
• Autonomous IP Quarantine: Hostile repeated exploit probes trigger real-time quarantine and synthetic stealth 404 deflection.
• Phylax v0.2.6: Synchronized with latest zero-allocation threat pattern recognition engine.

v0.3.2

Propylea v0.3.2: Radical OJP Modularity, Quarantine Export Sanitizati…

Propylea v0.3.1: Crucible Fortification & Zero-Dependency Standalone Build

Crucible Fortification & Security Hardening in v0.3.1

• Zero-Dependency Public Git Resolution: Migrated phylax and hippodrome dependencies to authoritative public Git repositories, allowing external operators to clone and build cleanly without sibling repository requirements.
• 5xx Server Error Failover Hedging: In hedged tournament racing, detected upstream 5xx server errors (500, 502, 503, 504) immediately trigger hedged failover to healthy sibling upstreams instead of aborting healthy requests.
• Allocation Bomb Guard on Hedged Streaming: Enforced http_body_util::Limited on incoming body ingestion during hedged dispatch, bounding chunked requests to max_body_bytes and preventing memory exhaustion OOM bombs.
• Expanded Adversarial Test Suite: Added adversarial integration tests asserting instantaneous 503 recovery and strict payload boundary containment.

Propylea v0.3.0: Speculative Hedged Tournament Racing

🌟 Propylea v0.3.0: Speculative Hedged Tournament Racing

• Active-Active Speculative Hedged Racing: Integrated sovereign hippodrome tournament engine under the hedged-racing feature. Replaces naive round-robin with microsecond fastest-horse concurrency.
• Adaptive P99 Tail-Latency Elimination: Automatically dispatches to the leader, hedged speculatively by secondary upstreams when leader stalls beyond the EWMA window. Losers are aborted in microseconds with zero memory leak.
• Method-Aware HTTP Idempotency Policy: Concurrent hedged racing on idempotent methods (GET, HEAD, OPTIONS, TRACE) combined with safe single-flight execution and instantaneous failover on mutating verbs (POST, PUT, DELETE, PATCH).
• Multi-Upstream Route Topology: Declarative upstreams = [...] pool configuration alongside standalone upstream.
• Static Musl Binaries with Hedged Racing: Pre-compiled multi-platform release binaries natively include Hippodrome tournament racing across Linux, macOS, and Windows.
• Cryptographic Provenance: Deterministic SHA-256 digests and OpenPGP detached signatures signed under Sovereign Release Key 4E428019A109578B (SOVEREIGN-SIGN-01).