feat(metrics): v1.88 Metrics Phase 2 — journal evidence + enrichments + docs#429
Merged
feat(metrics): v1.88 Metrics Phase 2 — journal evidence + enrichments + docs#429
Conversation
M88-1: Total processed packets (sum of all counters, labeled clearly) M88-2: Journal integration for LoginMon evidence - Bounded: 15m window, 500 lines, 3s timeout - Distinguishes exec failure (Unknown) from empty result (quiet) - LoginMon promoted from expected_limitation to evidence-backed M88-6: Anchor flow counters (7 anchors, labeled as pipeline stages) Evidence schema bumped to 1.88.0. External plane added (JournalEvidenceResult). Correlation updates: - LoginMon: bans + validator agrees = match - LoginMon: bans + validator idle = warning (shared counter) - LoginMon: events only (no bans) = warning (partial evidence) - LoginMon: no journal = unknown - All defaults → unknown (conservative) Renderer improvements: - Total counted packets with explicit semantics note - Anchor flow labeled "(pipeline stage transitions, not enforcement)" - Journal evidence section (LoginMon bans/events in 15m window) - Additional notes for LoginMon shared attribution and anchor meaning Golden fixture updated. All metadata bumped to v1.88. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Contributor
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned FilesNone |
M88-9: docs/EVIDENCE_CONTRACT.md - Evidence states (present/absent/unknown) - Counter/set/chain/journal semantics - Correlation rules and allowed values - nft command compatibility reference - Schema version 1.88.0 M88-10: docs/BUILD_STATUS.md - 26 CI workflows in transparency table - Contract gates (G1-1, G2-3, G8-1/2/3/4, B86-1, M84-2) - Runtime test inventory - Known issues - Health policy - How to verify section Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
itcmsgr
force-pushed
the
feat/v1.88-metrics-phase2
branch
from
a0f81cd to
e6c30f6
Compare
M88-3: Feed data freshness check - Scans /var/lib/nftban/feeds/ for newest file - Fresh if any file < 7 days old - Shows age in human renderer M88-4: GeoIP DB freshness check - Checks /var/lib/nftban/geoip/dbip-country-lite.mmdb mtime - Fresh if < 45 days old - Shows age in human renderer DataFreshnessResult added to EvidenceSnapshot. Human renderer shows "Data Pipeline Freshness" section. BUILD_STATUS.md updated per review (version, date, M87/M88 gates). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
itcmsgr
added a commit
that referenced
this pull request
Apr 16, 2026
Journal-backed LoginMon evidence, feed/GeoIP freshness, anchor flow, total packet counts, evidence contract doc, build status page. PR: #429. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
v1.88 Metrics Phase 2:
M88-1: Total processed packets (labeled as sum of all counters)
M88-2: Journal integration for LoginMon (bounded, evidence-backed)
M88-6: Anchor flow counters (labeled as pipeline stages)
M88-9: Evidence contract doc (docs/EVIDENCE_CONTRACT.md)
M88-10: Build status transparency page (docs/BUILD_STATUS.md)
Schema bumped to 1.88.0. LoginMon promoted from expected_limitation to evidence-backed. All metadata updated.
Remaining for v1.88
🤖 Generated with Claude Code