Issues

• [protocol] 重放窗口仅 64 个包：高 pps/多路径乱序下可能误丢

  enhancement
  talkincode/subnetra#12 · Filter by author mira-voss opened on Oct 12, 2026

• [docs] README/AGENT.md 写四个架构，CI/release 实际还构建并发布 mips/mipsel

  documentation
  talkincode/subnetra#11 · Filter by author mira-voss opened on Oct 12, 2026

• [test] 大端（mips）无单测/协议向量覆盖：CI 仅在 qemu 下跑 --version/--check

  enhancement
  talkincode/subnetra#10 · Filter by author mira-voss opened on Oct 12, 2026

• [supply-chain] 发布产物无签名/来源证明；install.sh 在缺少 sha256 工具时只告警并继续安装（fail-open）

  enhancement
  talkincode/subnetra#9 · Filter by author mira-voss opened on Oct 12, 2026

• [release] 任意 v* tag 都会移动 :latest 并发布为正式 Release（预发布版本号无保护）

  bug
  talkincode/subnetra#8 · Filter by author mira-voss opened on Oct 12, 2026

• [ci] release.yml 权限过宽（workflow 级 contents/packages: write），actions 未固定到 commit SHA

  enhancement
  talkincode/subnetra#7 · Filter by author mira-voss opened on Oct 12, 2026

• [reactor] 上游 #174 修复后的遗留边界：扫描预算按 drain 刷新、伪造已知 peer 源地址可耗尽预算

  enhancement
  talkincode/subnetra#6 · Filter by author mira-voss opened on Oct 12, 2026

• [build] 发布版用 ReleaseSmall 运行时安全检查全关，而测试跑在带检查的构建上；CI 的 fuzz 仅为冒烟

  enhancement
  talkincode/subnetra#5 · Filter by author mira-voss opened on Oct 12, 2026

• [docs][security] 安全模型未声明两条信任边界：无前向保密；hub 是全信任点

  documentation
  talkincode/subnetra#4 · Filter by author mira-voss opened on Oct 12, 2026

• [protocol] 线缆头部（含 flags）不在 AEAD 认证范围内：on-path 可把已认证的数据包翻转成 keepalive 并使其被静默吞掉

  enhancement
  talkincode/subnetra#3 · Filter by author mira-voss opened on Oct 12, 2026

• [control-plane] policy add 的 --src 必填却被静默忽略：策略匹配只看 dst（与上游 #170 同类的文档/行为不一致）

  bug
  talkincode/subnetra#2 · Filter by author mira-voss opened on Oct 12, 2026

• [release] 独立发布后分发入口仍全部指向上游 jamiesun/subnetra：install.sh、docker pull、curl | sh、Releases 与文档链接

  bugdocumentation
  talkincode/subnetra#1 · Filter by author mira-voss opened on Oct 12, 2026