Issues

• Local nftables HTTP bans don't stop long-lived HTTP/2 traffic to a Docker-published (docker-proxy) service — ban_ineffective post-grace

  enhancement
  evertramos/ezy-shield#659 · Filter by author evertramos opened on Sep 18, 2026

• Aggregator overflow counters: verdicts may carry fewer evidence lines than the threshold; rule: keys reach the AI payload

  bug
  evertramos/ezy-shield#641 · Filter by author evertramos opened on Sep 16, 2026

• fix(aggregate): global aggregator entry budget — the per-IP bound of #622 is not a host-wide bound

  bugmedium
  evertramos/ezy-shield#639 · Filter by author evertramos opened on Sep 16, 2026

• fix(notify): critical quota shared with per-IP ban_ineffective alerts; drop returns nil; hard 20/min cap; multi-channel dedup semantics (#613 residual)

  bugmedium
  evertramos/ezy-shield#635 · Filter by author evertramos opened on Sep 15, 2026

• fix(config,store): negative ban TTLs are accepted end to end and become permanent rows; manual ban writes the kernel before validating the TTL

  bugmediumsecurity
  evertramos/ezy-shield#633 · Filter by author evertramos opened on Sep 12, 2026

• fix(daemon): allow/disable --all residue from #608 — feed clear not best-effort, lift attribution and width, mapped rows, arm does not restore feeds

  bugmedium
  evertramos/ezy-shield#632 · Filter by author evertramos opened on Sep 12, 2026

• rules: hourly wp-login/xmlrpc/404 tiers count successful and benign requests — tune matchers before the hourly tier reaches a release

  enhancementmedium
  evertramos/ezy-shield#630 · Filter by author evertramos opened on Sep 12, 2026

• feat(config): trusted_proxies has no config surface — X-Forwarded-For resolution is unreachable in production, attacks behind a CDN are attributed to the edge

  enhancementmediumsecurity
  evertramos/ezy-shield#626 · Filter by author evertramos opened on Sep 12, 2026

• fix(scan): FuzzParseProcNetTCP stalls at 0 execs/s — pathological /proc/net/tcp input, flaky fuzz gate

  bugmediumsecurity
  evertramos/ezy-shield#625 · Filter by author evertramos opened on Sep 12, 2026

• fix(aggregate): a future-dated event blocks eviction and pins the LRU bucket

  buglow
  evertramos/ezy-shield#624 · Filter by author evertramos opened on Sep 12, 2026
  1

• fix(bench): the benchmark flush is a no-op (no long-window split) and the corpus has no hour-scale legit scenario

  bugmedium
  evertramos/ezy-shield#623 · Filter by author evertramos opened on Sep 12, 2026

• fix(daemon): gate-refused bans are audited/listed/streamed as bans; the refusal and the late apply leave no audit row

  bugmedium
  evertramos/ezy-shield#614 · Filter by author evertramos opened on Sep 10, 2026

• fix(daemon): manual CIDR ban is silently reverted by the next reconcile (no bans_active row for prefixes)

  bughighsecurity
  evertramos/ezy-shield#609 · Filter by author evertramos opened on Sep 10, 2026

• meta: invariant-first review of the codebase — model, harness, subsystem passes, adversarial scenarios, dogfood automation

  hightriaged
  evertramos/ezy-shield#605 · Filter by author evertramos opened on Sep 10, 2026
  2

• Traefik plugin

  future
  evertramos/ezy-shield#255 · Filter by author evertramos opened on Jul 23, 2026

• feat(release): publish and maintain an AUR package

  futuremaybetriaged
  evertramos/ezy-shield#227 · Filter by author evertramos opened on Jul 18, 2026
  1

• feat(release): armv7 (32-bit ARM) builds for Raspberry Pi

  futuremaybetriaged
  evertramos/ezy-shield#226 · Filter by author evertramos opened on Jul 18, 2026
  2

• docs(adr): SSO scope and edition placement for the coordinator

  dashboardneeds-humanwontfix
  evertramos/ezy-shield#209 · Filter by author evertramos opened on Jul 18, 2026

• docs(adr): fleet coordinator — network listener scope, transport and trust model

  dashboardneeds-human
  evertramos/ezy-shield#208 · Filter by author evertramos opened on Jul 18, 2026
  1

• chore(governance): CLA signing automation and contributing docs

  needs-human
  evertramos/ezy-shield#186 · Filter by author evertramos opened on Jul 18, 2026
  1

• docs: publish the false-positive audit methodology and results

  needs-human
  evertramos/ezy-shield#185 · Filter by author evertramos opened on Jul 18, 2026 · v0.2
  1

• test(e2e): QEMU e2e matrix across target distros and platforms (x86_64/arm64)

  launch-stretchneeds-human
  evertramos/ezy-shield#109 · Filter by author evertramos opened on Jul 11, 2026 · v0.1.1
  1