Milestone 9a: classical session rekey (~120s rotation) + epoch handling (#9) - #90

Merged

vxfemboy merged 13 commits into

mainfrom

feat/rekey-9a-session-rotation

Jul 22, 2026

Commits on Jul 19, 2026

docs(rekey.9a): design spec — classical session rekey (~120s) + epoch handling
vxfemboy
committed
docs(rekey.9a): implementation plan (5 tasks, subagent-driven)
vxfemboy
committed
feat(rekey.9a): EpochSet state machine (current/next/previous, WireGuard confirmed-switch)
vxfemboy
committed
test(rekey.9a): assert promotion refreshes current_created_ms (Task 1 review)
vxfemboy
committed
refactor(rekey.9a): PeerState::Established carries an EpochSet; route in/out through current epoch
vxfemboy
committed
fix(rekey.9a): EpochInbound::Send carries EgressDatagram (preserve dst+fate for relay peers)
vxfemboy
committed
feat(rekey.9a): schedule mid-session rekey in tick (winner-initiates, one-in-flight, loser-fallback)
vxfemboy
committed
feat(rekey.9a): complete rekey — initiator promote on Resp, responder install_next on Init
vxfemboy
committed
fix(rekey.9a): don't schedule rekey for relay peers (completion is direct-only; avoid never-completing churn)
vxfemboy
committed
test(rekey.9a): netns money test — loss-free rotation + on-wire conn_tag rotation
vxfemboy
committed
test(rekey.9a): witness tool errors cleanly on malformed pcap instead of panicking (review)
vxfemboy
committed
fix(rekey.9a): idempotent responder rekey reply (converge on one session under Init retransmit/Resp reorder)
vxfemboy
committed
docs(rekey.9a): lockstep note on init_ephemeral offset vs HandshakeInit framing (review)
vxfemboy
committed