Migrate CVE Hunt to Tek9 #1

Closed

nsaspy wants to merge 3 commits from feat/tek9-cve-database into master

nsaspy commented

2026-09-08 21:57:45 +00:00

Owner

Summary

replace CouchDB and session-refresh machinery with embedded Tek9 0.2 / LMDB storage
serialize mutations through a single writer actor and commit records, indexes, and durable sync metadata atomically
ingest complete CVE JSON 5.x CNA + ADP records from the official CVEProject/cvelistV5 repository
replace delta-order assumptions with exact Git commit watermarks and changed-file reconciliation
add indexed queries for state, year, assigner, update time, CWE, severity, vendor, and product
restore the web feature as a read-only /api/v1 HTTP API
add CLI commands, hooks, XDG configuration, pinned Nix packages, systemd hardening, tests, and exact-head CI
remove the root/Docker/CouchDB installer and all load-time daemon side effects

Validation

git diff --check
balanced Common Lisp/ASDF source scan
FiveAM regression suite, including real Git commit-diff synchronization
HTTP system load and executable smoke test
core and web Nix package checks

Dependency pin

Tek9 is locked to 1cb978084da8b4f1d184b3ef2a1d30057f525608 (0.2.0) in both CI and flake.lock.

## Summary - replace CouchDB and session-refresh machinery with embedded Tek9 0.2 / LMDB storage - serialize mutations through a single writer actor and commit records, indexes, and durable sync metadata atomically - ingest complete CVE JSON 5.x CNA + ADP records from the official `CVEProject/cvelistV5` repository - replace delta-order assumptions with exact Git commit watermarks and changed-file reconciliation - add indexed queries for state, year, assigner, update time, CWE, severity, vendor, and product - restore the web feature as a read-only `/api/v1` HTTP API - add CLI commands, hooks, XDG configuration, pinned Nix packages, systemd hardening, tests, and exact-head CI - remove the root/Docker/CouchDB installer and all load-time daemon side effects ## Validation - `git diff --check` - balanced Common Lisp/ASDF source scan - FiveAM regression suite, including real Git commit-diff synchronization - HTTP system load and executable smoke test - core and web Nix package checks ## Dependency pin Tek9 is locked to `1cb978084da8b4f1d184b3ef2a1d30057f525608` (0.2.0) in both CI and `flake.lock`.

nsaspy added 1 commit

2026-09-08 21:57:45 +00:00