Repository navigation

feat: add resolved destination policy - #3

Merged

seonghobae merged 60 commits into

mainfrom

feat/resolved-destination-policy

Aug 6, 2026

Merged

feat: add resolved destination policy#3
seonghobae merged 60 commits into
mainfrom
feat/resolved-destination-policy

Commits on Aug 6, 2026
- feat: scaffold resolved destination policy crate
  seonghobae
  committed
  79a3c24
- feat: expose destination policy contracts
  seonghobae
  committed
  ef54470
- feat: classify resolved IPv4 and IPv6 destinations
  seonghobae
  committed
  f1a6ab9
- feat: pin and revalidate approved resolution snapshots
  seonghobae
  committed
  043676c
- feat: reauthorize every redirect hop
  seonghobae
  committed
  fc94c2e
- test: specify destination address classification
  seonghobae
  committed
  ce7cc93
- test: specify DNS pinning and rebinding policy
  seonghobae
  committed
  ddd3d2d
- test: specify redirect reauthorization and cycle limits
  seonghobae
  committed
  a141238
- build: add destination policy workspace crate
  seonghobae
  committed
  1792dca
- build: lock destination policy crate
  seonghobae
  committed
  9e1526d
- docs: record resolved destination policy design
  seonghobae
  committed
  6889741
- docs: add destination policy implementation plan
  seonghobae
  committed
  e53d866
- docs: accept resolved destination policy ADR
  seonghobae
  committed
  45b14fd
- docs: describe resolved destination safety contract
  seonghobae
  committed
  4e9c78b
- docs: integrate resolved destination architecture
  seonghobae
  committed
  a6593bd
- docs: record destination policy changes
  seonghobae
  committed
  56d53a1
- docs: mark destination policy foundation in roadmap
  seonghobae
  committed
  0d5add7
- docs: doctor resolved destination and redirect standards
  seonghobae
  committed
  4d8c288
- docs: index destination policy design and plan
  seonghobae
  committed
  efdedf5
- test: require resolved destination governance
  seonghobae
  committed
  0216607
- fix: preserve globally reachable registry exceptions
  seonghobae
  committed
  a609a56
- test: cover globally reachable registry exceptions
  seonghobae
  committed
  08bcc30
- fix: bind localhost and literal origins to resolved addresses
  seonghobae
  committed
  9f60a3a
- test: enforce localhost and literal-origin resolution binding
  seonghobae
  committed
  7beea2b
- docs: bind special and literal origin resolution semantics
  seonghobae
  committed
  853a3b9
- docs: record literal-origin resolution binding
  seonghobae
  committed
  b9e55ff
- fix: keep destination repository contract explicit
  seonghobae
  committed
  026f8c2
- style: apply rustfmt address layout
  seonghobae
  committed
  15880ca
- style: apply rustfmt address layout
  seonghobae
  committed
  bec9963
- style: apply rustfmt export layout
  seonghobae
  committed
  0536c41
- style: apply rustfmt resolution layout
  seonghobae
  committed
  798536a
- style: apply rustfmt address test layout
  seonghobae
  committed
  1a875cd
- style: apply rustfmt redirect test layout
  seonghobae
  committed
  8af98c5
- style: apply rustfmt resolution test layout
  seonghobae
  committed
  ca64c6f
- fix: use prefix-safe origin authority extraction
  seonghobae
  committed
  083c1cb
- test: consolidate generic resolution coverage paths
  seonghobae
  committed
  0986524
- test: cover numeric redirect digest branch
  seonghobae
  committed
  8571b59
- fix: classify Azure and EKS platform endpoints
  seonghobae
  committed
  3be403f
- test: cover Azure and EKS platform endpoints
  seonghobae
  committed
  608a088
- docs: doctor cloud platform metadata endpoints
  seonghobae
  committed
  d06c5c4
- fix: bound resolver answer cardinality
  seonghobae
  committed
  7ffd937
- feat: expose resolver answer bound
  seonghobae
  committed
  7d21499
- test: enforce bounded resolver answers
  seonghobae
  committed
  4ae22e8
- docs: document bounded resolver snapshots
  seonghobae
  committed
  b287b49
- docs: record resolver bounds and platform endpoints
  seonghobae
  committed
  95cf7be
- docs: bind resolver limits and platform endpoints in ADR
  seonghobae
  committed
  c1c2882
- style: apply rustfmt to IPv6 metadata endpoints
  seonghobae
  committed
  d06d028
- test: prove mapped metadata endpoints cannot bypass policy
  seonghobae
  committed
  3769ade
- fix: deny unallocated IPv6 global unicast space
  seonghobae
  committed
  adb9a8b
- test: bind IPv6 public classification to IANA allocations
  seonghobae
  committed
  c7dfd40
- docs: doctor allocated IPv6 global unicast ranges
  seonghobae
  committed
  5485189
- test: cover the complete IPv6 documentation prefix
  seonghobae
  committed
  2d1d281
- fix: narrow IPv6 documentation classification to RFC 9637
  seonghobae
  committed
  ace7e76
- style: apply rustfmt to RFC 9637 match arm
  seonghobae
  committed
  7d86364
- docs: cite RFC 9637 IPv6 documentation space
  seonghobae
  committed
  21c06ee
- test: correct RFC 9637 documentation boundaries
  seonghobae
  committed
  88578e8
- feat: implement standard redirect error traits
  seonghobae
  committed
  0aa78b7
- test: cover standard destination error contracts
  seonghobae
  committed
  9faf2f3
- docs: define destination registry maintenance gate
  seonghobae
  committed
  a6dc689
- test: bind destination governance documentation
  seonghobae
  committed
  7f4e9b2

Commits

Commits on Aug 6, 2026