IPX: wire versioned mitmproxy spool addon #68

Closed

nsaspy wants to merge 4 commits from hackmode-rage-hackpert/136-ipx-addon into master

nsaspy commented

2026-09-04 20:36:57 +00:00

Owner

Implements the first provider/runtime slice of #136 on top of #135.

RED-first contract: supervised capture must pass an explicit append-only IPX spool path plus stable operation/session/spool identity and record version into mitmdump. RED head fbe7aec92b5a81d7f2c923ea2bba09f7ff5e670f failed common-lisp-core; monorepo and the product-tree boundary were green.

Implementation adds the versioned mitmproxy addon and capture-process wiring. The addon writes one append-only JSONL source-evidence record per completed HTTP exchange, preserves exact observed header/body bytes as base64, includes stable operation/session/spool/correlation provenance and connection metadata, flushes each record durably, and has no Tek9, KB, Hackpert, or StarIntel write path.

Newest repository lossless-evidence invariants override stale redaction wording in #136. Derived projections may be bounded later, but this source spool does not destroy secret-bearing evidence.

Exact implementation head 989f7b114f42775d598b64d1abb2c670b1a1b102 is GREEN: core, monorepo, and agent-framework-boundary all completed successfully. Replacement for draft #148 after GitHub's ready-for-review GraphQL fullDatabaseId failure.

Implements the first provider/runtime slice of #136 on top of #135. RED-first contract: supervised capture must pass an explicit append-only IPX spool path plus stable operation/session/spool identity and record version into mitmdump. RED head `fbe7aec92b5a81d7f2c923ea2bba09f7ff5e670f` failed `common-lisp-core`; monorepo and the product-tree boundary were green. Implementation adds the versioned mitmproxy addon and capture-process wiring. The addon writes one append-only JSONL source-evidence record per completed HTTP exchange, preserves exact observed header/body bytes as base64, includes stable operation/session/spool/correlation provenance and connection metadata, flushes each record durably, and has no Tek9, KB, Hackpert, or StarIntel write path. Newest repository lossless-evidence invariants override stale redaction wording in #136. Derived projections may be bounded later, but this source spool does not destroy secret-bearing evidence. Exact implementation head `989f7b114f42775d598b64d1abb2c670b1a1b102` is GREEN: core, monorepo, and agent-framework-boundary all completed successfully. Replacement for draft #148 after GitHub's ready-for-review GraphQL `fullDatabaseId` failure.

nsaspy added 4 commits

2026-09-04 20:36:57 +00:00