Dev#1

Merged

hiteshjoshi merged 49 commits intomainfrom

Mar 31, 2026

Commits on Mar 31, 2026

improve gitignore for rlm iterations
hiteshjoshi
committed
Production hardening: SQLite resilience, fsync durability, WAL checkpointing, zeroize decrypt output
hiteshjoshi
committed
Update README with changelog for fcfffe5
hiteshjoshi
committed
Harden server: 404-everything, SIGTERM/SIGHUP handling, shutdown WAL checkpoint, ciphertext size limit, SQLite mmap
hiteshjoshi
committed
Update README with changelog for fdee3d2
hiteshjoshi
committed
Resilience hardening: supervised tasks, health endpoint, input validation, SQLite tuning
hiteshjoshi
committed
Update README with changelog for a7d7afb
hiteshjoshi
committed
Exponential backoff for supervised tasks, deposit_log retention
hiteshjoshi
committed
Update README with changelog for a609534
hiteshjoshi
committed
λ-RLM iter 5: rate limiter GC, supervisor circuit breaker, WAL checkpoint strategy, PID race fix
hiteshjoshi
committed
Update README with changelog for a3f4688
hiteshjoshi
committed
λ-RLM iter 6: connection pool, handler timeouts, credential zeroize, startup guards
hiteshjoshi
committed
Update README with changelog for 1b65780
hiteshjoshi
committed
λ-RLM iter 7: AES-GCM zeroize, dynamic pool sizing, health check WAL monitor
hiteshjoshi
committed
Update README with changelog for 5fc281e
hiteshjoshi
committed
λ-RLM iter 8: DashMap rate limiter, flock PID locking, jemalloc opt-in, connection leak detection
hiteshjoshi
committed
Update README with changelog for 1ba345e
hiteshjoshi
committed
λ-RLM iter 9: replace exit(1) circuit breaker with max backoff, monotonic rate limiter, bounded sync_channel pool
hiteshjoshi
committed
Update README with changelog for 7b45baf
hiteshjoshi
committed
λ-RLM iter 10: hard conn lifetime, WAL checkpoint timeout, vault label validation, jemalloc default
hiteshjoshi
committed
Update README with changelog for e3eb87e
hiteshjoshi
committed
λ-RLM iter 11: cooperative conn interrupt, prepared statement cache, request timeout, global magic link rate limit
hiteshjoshi
committed
Update README with changelog for 756eadb
hiteshjoshi
committed
λ-RLM iter 17: zeroize vault plaintext return, cleanup indexes, paginated deletes
hiteshjoshi
committed
Update README with changelog for 64d8ea4
hiteshjoshi
committed
λ-RLM iter 18: connection max-lifetime recycling, hard heap limit, zero-copy sig decode, safer shutdown checkpoint
hiteshjoshi
committed
Update README with changelog for 033e801
hiteshjoshi
committed
λ-RLM iter 19: pool poison detection, DB circuit breaker, RLIMIT_NOFILE enforcement, proactive WAL truncation, X-Frame-Options
hiteshjoshi
committed
Update README with changelog for 4bc32f4
hiteshjoshi
committed
λ-RLM iter 20: constant-time magic link, fs cert watcher, FxHasher rate limiter, Acquire/Release circuit breaker, in-flight drain, panic-safe pool return
hiteshjoshi
committed
Update README with changelog for 72f8305
hiteshjoshi
committed
λ-RLM iter 21: remove notify crate, kill spawn_supervised, single-atomic circuit breaker, drop global magic link rate limit, branchless input validation, 256MB mmap
hiteshjoshi
committed
Update README with changelog for ae91eaf
hiteshjoshi
committed
λ-RLM iter 22: kill auto-TLS/acme.sh, sharded-mutex rate limiter, Condvar pool, drop parse_duration, strip magic link hints, const-table input validation, remove libc/dashmap/rustc-hash
hiteshjoshi
committed
Update README with changelog for 1c4ad26
hiteshjoshi
committed
λ-RLM iter 23: Box::leak AppState (kill Arc refcount), drop chrono (epoch_secs + Hinnant RFC3339), Box<str> vault secrets, static magic-link JSON response
hiteshjoshi
committed
Update README with changelog for e61756c
hiteshjoshi
committed
λ-RLM iter 24: OnceLock AppState (kill Box::leak), flock-based stop (kill ps/kill -0 TOCTOU), DbPool shutdown flag, fail-open rate limiter (try_lock), drop base64 for base64ct (constant-time), remo…
hiteshjoshi
committed
Update README with changelog for 88852d8
hiteshjoshi
committed
λ-RLM iter 25: kill magic_link module (~175 lines), CryptoError replaces anyhow in crypto paths (zero-alloc opaque errors), VecDeque pool (O(1) pop), drop connection recycling, drop SIGHUP TLS relo…
hiteshjoshi
committed
Update README with changelog for 3d768ca
hiteshjoshi
committed
λ-RLM iter 26: verify_strict for Ed25519 malleability resistance, single-alloc encrypt (encrypt_in_place_detached), stack-allocated decode for keys/signatures (kill decode_vec heap allocs), idiomat…
hiteshjoshi
committed
Update README with changelog for 21f5e2e
hiteshjoshi
committed
λ-RLM iter 27: zero-slack vault zeroization (Vec→Box<[u8]>), credentials shrink_to_fit, 1-hour SQLite connection recycling
hiteshjoshi
committed
Update README with changelog for 56ee9d7
hiteshjoshi
committed
λ-RLM iter 28: zero-alloc deposit verify (eliminate anyhow from hot path), WITHOUT ROWID for used_deposits, PRAGMA auto_vacuum=INCREMENTAL, remove stub Key/Service commands, remove legacy magic_lin…
hiteshjoshi
committed
Update README with changelog for 182f8ad
hiteshjoshi
committed
λ-RLM iter 29: remove hex+dirs crates (-2 deps, -55 lines Cargo.lock), nonce via base64ct, temp suffix via u64 format, HOME from env, PRAGMA incremental_vacuum in hourly maintenance
hiteshjoshi
committed
Update README with changelog for 4ff9c9b
hiteshjoshi
committed