Skip to content

v0.2.0 — HTTP transport, concurrency, encoded-exfil detection

Choose a tag to compare

View all tags
@yxshwanth yxshwanth released this 05 Jul 01:24
· 37 commits to main since this release
v0.2.0
401f7a0

Interlock v0.2 closes the gap between demo and deployable: real HTTP/SSE transport, multi-session concurrency, and encoding-aware dataflow detection on the proxy plane — with honest scoping on what is still partial.

Headline

  • Streamable HTTP/SSE transport (MCP 2025-11-25): inspect-then-forward, session IDs, JSON + SSE responses
  • Multi-session concurrency: per-session backend pools, SessionManager, PIDRegistry, eBPF dynamic PID watch/unwatch, race CI
  • Encoded exfil detection (Variant A): canonical overlap for base64, hex, URL-encoding, and reversal at taint registration

Also in this release: engine microbenchmarks (make bench, docs/performance.md), opt-in SQLite evidence with max_records retention, event-log backpressure, eBPF ring-buffer drop counter, and docs/v0.2_summary.md.

Honest partials

These are real capabilities with real boundaries — called out in the changelog and README:

  1. Performance numbers are engine-component benchmarks, not end-to-end per-request proxy latency. Do not quote ~0.56 ms EvaluateRequest as "Interlock's overhead" — see TestBenchmark_FullHTTPLoad_KnownGap.
  2. Variant B is a connect() tripwire, not payload detection. Legs-only SUSPICIOUS at 0.60 until eBPF sendto/write capture lands post-v0.2.

Known limitations

  • Value-overlap catches literal + canonical encodings only — not split/compressed/nested
  • HTTP multi-session spawns a full backend pool per initialize — bounded by config, but session-flood can exhaust process slots
  • Unattributed eBPF events during PID teardown are audit-logged, not tripped
  • Default evidence remains append-only JSONL; SQLite retention is opt-in

Verify this release

This tag is signed (SSH). Verify locally:

git tag -v v0.2.0

Signing key fingerprint: SHA256:j0vZxZexFyPA8Hj8ys2NbdMEtyqmZ+kT60eWRdfjlq8 — see SECURITY.md.

Full changelog: CHANGELOG.md

Assets 2
Loading