fiber_audit 0.1.0 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (54) hide show
  1. checksums.yaml +4 -4
  2. data/.fiber-audit.example.yml +19 -0
  3. data/ARCHITECTURE.md +726 -0
  4. data/CHANGELOG.md +30 -0
  5. data/LICENSE +201 -0
  6. data/README.md +66 -8
  7. data/lib/fiber_audit/cli.rb +87 -2
  8. data/lib/fiber_audit/configuration.rb +106 -6
  9. data/lib/fiber_audit/errors.rb +2 -0
  10. data/lib/fiber_audit/operation_vocabulary.rb +42 -0
  11. data/lib/fiber_audit/reporters/text.rb +1 -1
  12. data/lib/fiber_audit/runtime/active_operations.rb +146 -0
  13. data/lib/fiber_audit/runtime/boot.rb +83 -0
  14. data/lib/fiber_audit/runtime/clock.rb +35 -0
  15. data/lib/fiber_audit/runtime/environment.rb +289 -0
  16. data/lib/fiber_audit/runtime/event.rb +86 -0
  17. data/lib/fiber_audit/runtime/execution_context.rb +89 -0
  18. data/lib/fiber_audit/runtime/heartbeat.rb +113 -0
  19. data/lib/fiber_audit/runtime/jsonl/schema.rb +312 -0
  20. data/lib/fiber_audit/runtime/jsonl/writer.rb +122 -0
  21. data/lib/fiber_audit/runtime/lifecycle.rb +343 -0
  22. data/lib/fiber_audit/runtime/limits.rb +102 -0
  23. data/lib/fiber_audit/runtime/location.rb +44 -0
  24. data/lib/fiber_audit/runtime/policy.rb +121 -0
  25. data/lib/fiber_audit/runtime/probes/base.rb +333 -0
  26. data/lib/fiber_audit/runtime/probes/http.rb +80 -0
  27. data/lib/fiber_audit/runtime/probes/io_select.rb +50 -0
  28. data/lib/fiber_audit/runtime/probes/registry.rb +156 -0
  29. data/lib/fiber_audit/runtime/probes/socket.rb +76 -0
  30. data/lib/fiber_audit/runtime/probes/subprocess.rb +83 -0
  31. data/lib/fiber_audit/runtime/probes/synchronization.rb +58 -0
  32. data/lib/fiber_audit/runtime/probes/thread_state.rb +39 -0
  33. data/lib/fiber_audit/runtime/probes/thread_wait.rb +25 -0
  34. data/lib/fiber_audit/runtime/rails_integration.rb +279 -0
  35. data/lib/fiber_audit/runtime/recorder.rb +333 -0
  36. data/lib/fiber_audit/runtime/redactor.rb +102 -0
  37. data/lib/fiber_audit/runtime/sampler.rb +26 -0
  38. data/lib/fiber_audit/runtime/scheduler_observer.rb +128 -0
  39. data/lib/fiber_audit/runtime/session.rb +112 -0
  40. data/lib/fiber_audit/runtime/supervisor.rb +114 -0
  41. data/lib/fiber_audit/runtime/validation.rb +68 -0
  42. data/lib/fiber_audit/runtime/watchdog.rb +479 -0
  43. data/lib/fiber_audit/runtime/watchdog_policy.rb +64 -0
  44. data/lib/fiber_audit/runtime.rb +37 -0
  45. data/lib/fiber_audit/static/rules/blocking_subprocess.rb +3 -8
  46. data/lib/fiber_audit/static/rules/direct_socket.rb +2 -3
  47. data/lib/fiber_audit/static/rules/io_select.rb +2 -4
  48. data/lib/fiber_audit/static/rules/net_http_in_request.rb +3 -5
  49. data/lib/fiber_audit/static/rules/synchronization.rb +2 -6
  50. data/lib/fiber_audit/static/rules/thread_current_state.rb +3 -2
  51. data/lib/fiber_audit/static/rules/thread_join.rb +3 -2
  52. data/lib/fiber_audit/version.rb +1 -1
  53. data/lib/fiber_audit.rb +1 -0
  54. metadata +38 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 77fa4ea6790d065dbe69e5cbda2b0753dc2d1c1baa1983717fd00e3bab37b8c8
4
- data.tar.gz: 5fd00521ad7ff862aede23b0f9abe9e9f126be7b967e2a3f2e364c9ffc5191c6
3
+ metadata.gz: 1c20b77ea07f9fedfc345f994798c6d58ffe14853dbf63bd46a1328cdf486271
4
+ data.tar.gz: c71285e1a636ebf514251634a8202b40a1459e2bb7de36b71f7459313afb72d8
5
5
  SHA512:
6
- metadata.gz: 1849f2cf6a7abc30f3cf20c95689c2b5e8a32574908c472f5d685fa05267aabaaefdfc65a6e31f249ce03c7175d458c57eccd0bb945194dadd58cd89bff38fd9
7
- data.tar.gz: fa902948a9e4d517b77cd4bf33dc50b1082f4ba69d8ea406262101e6baef5c583aa256208ba72eca0d9985b3668d868d7252bec4de24efd118fd0d9c4d9c3411
6
+ metadata.gz: 86784bb39bb1d300324ef74e4ffce7e087a00567633c0645d8a0eed15fbb83cda38ec422ab07bcc49a1546c4d72614089b3af3ca78081abcd75eb08a15cb511b
7
+ data.tar.gz: 672e6b9cdd0da82c01e2ef4f2377ac82905b8656d5e545db234d55e0ebf6a36c854ca6f3bbc3c784b97363bae320fcceddfad34075cc885c9e91898dde255e14
data/.fiber-audit.example.yml CHANGED
@@ -31,3 +31,22 @@ report:
31
31
 
32
32
  # critical, high, medium, low, or info. Default low hides info findings.
33
33
  min_severity: low
34
+
35
+ # The opt-in `fiber-audit runtime -- COMMAND` recorder, targeted operation
36
+ # probes, and scheduler watchdog use these limits.
37
+ runtime:
38
+ redaction:
39
+ mode: strict
40
+ sampling:
41
+ rate: 0.1
42
+ overhead:
43
+ max_events_per_second: 100
44
+ max_events_per_session: 10000
45
+ max_record_bytes: 16384
46
+ max_session_bytes: 10485760
47
+ watchdog:
48
+ enabled: true
49
+ heartbeat_interval_ms: 25
50
+ stall_threshold_ms: 100
51
+ max_frames: 20
52
+ fail_open: true