Kristoffer Dalby 4cb74dfe04 policy, servertest: derive exit routes from allowed public destinations ...

A public IP permits exit defaults; private-only rules do not. Replay six
accepted and two refused SaaS captures with range-equivalence checks,
preserving provenance and the literal-default-route ACL validation gap.

2026-11-02 19:15:40 +01:00

..

matcher

policy, servertest: derive exit routes from allowed public destinations

2026-11-02 19:15:40 +01:00

policyutil

hscontrol: name policy, registration and map delivery decisions

2026-11-02 19:15:40 +01:00

v2

policy, servertest: derive exit routes from allowed public destinations

2026-11-02 19:15:40 +01:00

pm.go

policy/v2, state: elect primaries by oldest control session

2026-11-02 19:15:40 +01:00

policy_autoapprove_test.go

policy: look up approved routes in a set when auto-approving

2026-11-02 19:15:40 +01:00

policy_route_approval_test.go

all: apply golangci-lint autofixes

2026-08-25 21:59:00 +02:00

policy_test.go

types, state: derive and reduce approved routes once

2026-11-02 19:15:40 +01:00

policy.go

policy, state: log only the routes auto-approval adds

2026-11-02 19:15:40 +01:00

route_approval_test.go

policy, state: log only the routes auto-approval adds

2026-11-02 19:15:40 +01:00