Core gateway pipeline, policy loader/validator/compiler, rate limiter, circuit breaker, proxy, GraphQL handler, gRPC handler, protocol router, structured logging, Minikaran anomaly detection, VeriSimDB audit client, SafeTrust (formally specified trust hierarchy), K9 service contracts.
-
2 Zig parsers:
ffi/zig/graphql/parser.zig,ffi/zig/grpc/parser.zig -
2 Idris2 ABI modules:
src/abi/Protocol.idr,src/abi/Types.idr
See ROADMAP.adoc for full details. Summary:
-
Security tests (request sanitization, header handling, SSRF, capability tokens)
-
End-to-end tests (request lifecycle, policy hot-reload, upstream proxy)
-
Benchmarks
-
Real fuzz harness (placeholder exists, not real)
-
ROADMAP.adoc— Current roadmap (canonical) -
TEST-NEEDS.md— Test gap analysis -
PROOFS_NEEDED.md— Formal proof gap analysis -
.machine_readable/STATE.a2ml— Machine-readable state