- Demo docs replaced by the screencast docs (single source of truth): the
legacy demo-session.sh/demo-record.py and the v0.9 renderer were removed
instead of being kept as a second convention.
- feature-matrix: stale 'M2-in-progress' vocabulary gone; the rows the 15
gates prove now say VERIFIED-in-VM and name the gate; af-to is now an
explicit non-goal row (INET6 0 in this build).
- guide: the queues/divert/pflog sections described a state that no longer
exists (priq-only, divert dropping packets, pflog logging nothing); they
now describe the shipped behaviour.
- vm-lab: the 15 real gates with what each proves, 15/15 green, and the
pf0 -> cli/srv/gw2 ssh setup the screencasts rely on.
- install/build: pdivert and pflogd are built and ported (docs said
otherwise); module object list now includes hfsc.c, fq_codel.c, pfk_pflog.c;
the screencast pipeline is an optional build stage.
- pf-guide: the 'M2 scope only' framing is gone; honest gaps listed.
- caveats: three new sections about the screencast pipeline (MiniMax video
generation blocked by the account tier, narration as a separate track, a
video frame is not a verdict).
- porting-notes: what the recording taught us.
- README/README.pt-BR: status, milestones, layout and video section updated.
All internal doc links verified.
- compat layer extended through the full BSD API surface pf_ioctl/pf_lb/
pf_if/pf_norm/pf_table/pf_ruleset/radix/md5/sha2 need (all compile):
cpumem/counters model, ifaddr/ifg groups, cred view, endian+in6 names,
NAT46/64, SipHash24, mbuf_list, frag6 helpers, ip6 forward/checksum,
tcp options/FSM names, taskqueue & sysctl shims (documented in
docs/porting-notes.md)
- pfsrc/divert_sock.c: real BSD divert(4) as runtime-registered PF_DIVERT=32
socket family inside the module (sock_register; NPROTO=AF_MAX=45 -> zero
core patches); divert_packet/divert6_packet wired for pf.c
- compat/pfk_ifq.c: OpenBSD 8.0 ifq framework with priq back end; hfsc and
fq_codel aliases pending M5 (recorded in feature matrix as pending)
- design + plan updated for the divert decision (user-requested)
- stage-port.sh: single deterministic rename program for headers and .c
lgcosta