Commit Graph

3 Commits

Author SHA1 Message Date
ae18b00fa4 feat(scanner): add model hot-reload and verified bot allowlist
ArcSwap-based lock-free hot-reload via file mtime polling. Bot
allowlist with CIDR (instant) + reverse/forward DNS (cached with
background worker thread) IP verification to prevent UA spoofing
by known crawlers, LLM agents, and commercial B2B bots.

Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>
2026-03-10 23:38:19 +00:00
273a203c41 feat(scanner): add logistic regression training pipeline
JSONL audit log ingestion with ground-truth label support for external
datasets (CSIC 2010), SecLists wordlist ingestion for synthetic attack
samples, class-weighted gradient descent, stratified 80/20 train/test
split with held-out evaluation metrics (precision, recall, F1).

Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>
2026-03-10 23:38:19 +00:00
b7c8243955 feat(scanner): add per-request scanner detector with linear classifier
12-feature extraction (zero-alloc hot path), 2 interaction terms,
weighted linear scoring model with hard allowlist short-circuits for
configured host+cookies and host+browser UA. Returns ScannerVerdict
with score+reason for pipeline logging.

Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>
2026-03-10 23:38:19 +00:00