(scratch) test: track RFC 4787, and state its requirements as executable contracts - #1741

Closed

daniel-noland wants to merge 37 commits into

pr/daniel-noland/fuzz-nf-probesfrom

pr/daniel-noland/spec-compliance

Commits on Aug 26, 2026

feat(clock): Read the clock through a facade, and lint for it

daniel-noland
and
claude
committed
99ed189
test(nat): Test flow expiry on a clock the test drives

daniel-noland
and
claude
committed
d97c025
test(nat): Drive port forwarding with configuration-relative packets

daniel-noland
and
claude
committed
c3e8a86
test(net): Test the flow expiry state machine as an algebra

daniel-noland
and
claude
committed
256f1e8
fix(masquerade): Keep both halves of a flow pair alive

daniel-noland
and
claude
committed
493cde4
test(stats): Test the exponentially weighted moving average

daniel-noland
and
claude
committed
77dd7c6
test(stats): Test the per-vpc statistics store

daniel-noland
and
claude
committed
483ab8b
test(stats): Test the time-slice apportioning in the collector

daniel-noland
and
claude
committed
2b1e98e
test(routing): Test the stale window on a clock the test drives

daniel-noland
and
claude
committed
81105e9
test(routing): Drive the router IO loop through its own sockets

daniel-noland
and
claude
committed
eeb5494
test(routing): Stand in for frr-agent and test the frrmi lifecycle

daniel-noland
and
claude
committed
baaf9af
docs(routing): Record why cli_wake_on_writeable stays uncovered

daniel-noland
and
claude
committed
7edaa32
test(routing): Follow a route from the socket to the fib

daniel-noland
and
claude
committed
17e44c0
test(net): Close every mutant flow_info's properties were missing

daniel-noland
and
claude
committed
bc793c9
test(masquerade): Pin the flow state machine, exhaustively

daniel-noland
and
claude
committed
1576fc2
docs(testing): Record what mutation testing is for here, and what it is not

daniel-noland
and
claude
committed
cd391d0
fix(net): Validate the RFC 4884 original datagram field as the RFC says

daniel-noland
and
claude
committed
8a5647e
build(duvet): Track RFC 4884 compliance, and vendor the specification

daniel-noland
and
claude
committed
8b92d3a
build(duvet): Track RFC 5382, and record where masquerade departs from it

daniel-noland
and
claude
committed
a427e0c
docs(testing): Record what duvet can and cannot parse, and what is still open
daniel-noland
committed
ab5d086
build(duvet): Track RFC 4787, and record where masquerade departs from it
daniel-noland
committed
16bd80c
test(masquerade): State RFC 4787 endpoint independence as a property, and measure it
daniel-noland
committed
8287e76
test(masquerade): Assert RFC 4787 outbound refresh, and record where it is not held
daniel-noland
committed
da33f3a
test(masquerade): Classify masquerade's filtering, and check RFC 4787 determinism
daniel-noland
committed
2653652
docs(testing): Record what the RFC errata say, and where the corpus lies

daniel-noland
and
claude
committed
74f81a4
test(masquerade): State RFC 4787 REQ-12 as an executable contract

daniel-noland
and
claude
committed
29a7861
test(masquerade): Make a stale citation a build failure

daniel-noland
and
claude
committed
e7d0520
docs(forwarding): Record RFC 4787 REQ-13, and why it is one decision not three

daniel-noland
and
claude
committed
faf1071
fix(duvet): Regenerate the snapshot the REQ-12 and REQ-13 commits left stale
daniel-noland
committed
631488c
docs(testing): Record what the interlock found, and which specifications apply
daniel-noland
committed
13e981b
docs(testing): Record where a citation goes when the code is abstract
daniel-noland
committed
bbf5690
test(net): Take the RFC 4884 minimum from both sides, in both families
daniel-noland
committed
d75aaa7
test(nat): Cite port overloading on the code that could commit it
daniel-noland
committed
56ced01
test(nat): Cite the exhaustion walk alongside the stage property
daniel-noland
committed
1799836
docs(testing): Record the three tiers, and the two ways a citation can
daniel-noland
committed
88b7b64
docs(nat): Drop the process narration from the citation comments
daniel-noland
committed
fea7d1d
fix(net): Backtick a doc identifier

daniel-noland
and
claude
committed
762b44a