refactor(ae): rename dx_attack_graph → dx_evidence_graph (malignant view) - #77

Closed

ConstanzeTU wants to merge 58 commits into

feat/ae-query-runnerfrom

refactor/ae-evidence-graph-rename

Commits on Jun 21, 2026

adaptive_export: production AE — streaming export + write-integrity

Entlein
authored and
entlein
committed
c6515fd
adaptive_export: ADAPTIVE_PASSTHROUGH firehose loop
entlein
committed
390ee45
ci: dx-image workflow — build + publish dx-daemon to ghcr
entlein
committed
9535139
Revert ci: dx-image workflow — wrong repo
entlein
committed
4ab9d07
adaptive_export: unit-normalize trigger watermark cursor + load-test affordances

Entlein
authored and
entlein
committed
6139e3b
e2e_test/adaptive_export_loadtest: AE fixture-isolation load-test harness

Entlein
authored and
entlein
committed
fd80e5f
e2e_test/adaptive_export_loadtest: document AE implied contracts (C1-C14) + diagrams

Entlein
authored and
entlein
committed
1001f6d
adaptive_export_loadtest: C15 write-duration contract + DX-steering diagram; gen sustained-DNS mode

Entlein
authored and
entlein
committed
4e62453
adaptive_export/trigger: update test SQL substrings for multiIf normalisation
entlein
committed
746421f
adaptive_export_loadtest: exp_control uses real now_s event_time (no future-stamp watermark poison)

Entlein
authored and
entlein
committed
808a3ea
adaptive_export: ADAPTIVE_RECONCILE per-pull write-fidelity instrument

Entlein
authored and
entlein
committed
9798a69
harness: exp_pipeline_reconcile — skip empty-key rows (0 rows != LOSS 1)

Entlein
authored and
entlein
committed
519bff5
harness: log4shell_fire.sh — reliably fire + restart the log4j-chain log4shell

Entlein
authored and
entlein
committed
3f6f409
harness: log4shell_fire.sh — detection-signal framing (Cyber Verification)

Entlein
authored and
entlein
committed
239e032
adaptive_export(passthrough): precompiled + concurrent firehose, drop http2

Entlein
authored and
entlein
committed
10ad397
adaptive_export: bazel BUILD deps for internal/reconcile + pxl compile.go

Entlein
authored and
entlein
committed
f4fe5c4
adaptive_export(pxl): raise Pixie 10k result cap via #px:set query flag

Entlein
authored and
entlein
committed
ee2dcfb
adaptive_export/sink: content_type silent-drop contract suite
entlein
committed
0fa7eb8
adaptive_export_loadtest: DX-steered-vs-ALL datavolume reduction harness

Entlein
authored and
entlein
committed
1102ce5
adaptive_export_loadtest: deep AE NFR benchmark harness

Entlein
authored and
entlein
committed
fed1c6e
adaptive_export_loadtest: fix DX-reduction dead-arm (clear stale steering + live-pod guard)

Entlein
authored and
entlein
committed
7532c87
nfr harness: fix lag (dateDiff) + drop racy broker-pct completeness

Entlein
authored and
entlein
committed
0094ec7
dx-reduction harness: report ROWS reduction (primary) + bytes (secondary)

Entlein
authored and
entlein
committed
e59180a
ae deployment: add memory limit (1Gi) + raise cpu limit to 1 core

Entlein
authored and
entlein
committed
84eac90
ae bootstrap: separate the secret from the re-applied infra bundle

Entlein
authored and
entlein
committed
00aeaf3
dx-reduction harness: fire BOTH attack stages so DX steers the backend

Entlein
authored and
entlein
committed
d8192aa
adaptive_export: rename whitelist→allowlist across streaming path + add DX-steering diagnostics

Entlein
authored and
entlein
committed
61ef494
ae(clickhouse): create forensic_db.dx_attack_graph at boot

Entlein
authored and
entlein
committed
9feda72
ae(clickhouse): dx_attack_graph numeric cols Int64/Float64 (px-readable)

Entlein
authored and
entlein
committed
2c7cfcf
adaptive_export(streaming): add #px:set max_output_rows cap flag to scanner buildPxL

Entlein
authored and
entlein
committed
48b100e
ae(clickhouse): create dx_attack_graph_malicious view at boot

authored and
entlein
committed
8e7f1c6
ae(control): /dx/attack_graph ingest endpoint -> ClickHouse

authored and
entlein
committed
39a2f12
adaptive_export: convention pass — consolidate CH HTTP, drop dead code, fix stale tests
entlein
committed
3b1d484
adaptive_export: restore executable bits on harness scripts (post-header)
entlein
committed
e9c1331
adaptive_export: lint pass + restore @px load prefix in cmd/BUILD.bazel
entlein
committed
15ee7a3
adaptive_export: address user review #2 #4 #6 + 4 outstanding CodeRabbit items
entlein
committed
31febbe
test(harness): consolidate to one run-picture + e2e CI workflow

pixie-agent
authored and
entlein
committed
fdfb451
revert(bazel): drop stray buildifier attribute-reorder in stirling container_images BUILD

pixie-agent
authored and
entlein
committed
dc644c3
ci: fix run-genfiles + run-container-lint on PR 53
entlein
committed
fcab916
ci: apply gazelle's actual kwarg order to stirling container_images
entlein
committed
3094068
ci: fix container-lint Errors on e2e workflow + new harness scripts
entlein
committed
19e84ad
ci: silence 6 SHELLCHECK Warnings to clear container-lint exit code
entlein
committed
e0a19dd
feat(ae-control): bearer-JWT auth + input validation (CodeRabbit followup)
pixie-agent
committed
e6a6237
fix(ae): remaining CodeRabbit Majors (#53 followup)
pixie-agent
committed
714c1fb

Commits on Jun 22, 2026

fix(ae-trigger): escape a PollLimit-saturated watermark boundary (from #67)
pixie-agent
committed
dfdc465

Commits on Jun 23, 2026

feat(ae-control): TLS on the control surface (CONTROL_TLS) (#71)

authored
decf2ae
Merge remote-tracking branch 'origin/main' into ae-followup-auth
Entlein
committed
0c65751

Commits on Jun 24, 2026

Commits on Jun 28, 2026

terraform: drop fork IaC from PR 68 — belongs on main, not this PR
pixie-agent
committed
ae41131
fork-infra: drop cockpit, .sops.yaml, e2e workflow from PR 68
pixie-agent
committed
6d10b07
feat(adaptive_export): wire the /query runner — dx OrderQuery → forensic capture (dx#93)

authored and
entlein
committed
7fc5561

Commits on Jul 2, 2026

refactor(ae): rename dx_attack_graph → dx_evidence_graph (malignant view)
pixie-agent
committed
2a9d070