zat.dev / stream
jetstream v2 in zig stream.waow.tech
Star
Fork 0
Watch

deploy: SSRF boundary (plc-only resolution) + linux packaging master

did:web DIDs pass unverified rather than making stream fetch attacker-named hosts (lesson #10); did:plc talks only to the operator-configured PLC. deploy/README.md captures the node requirements (MALLOC_ARENA_MAX=4, probe placement, build_info canary, disk sizing note) and `just package` produces the ReleaseSafe x86_64-linux-gnu binary — fully static of system deps thanks to vendored zstd/xxhash. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author zzstoatzz Co-author Claude Fable 5 Date Commit 77ac7a47 Parent c6ecef7b
+43
3 changed files