mirror of
https://github.com/luxfi/netrunner.git
synced 2026-07-27 00:04:23 +00:00
Hanzo AI
6f9a957b80
Replace plain TCP zap.Dial / zap.Listen with zwing.DialZAP / zwing.ListenZAP. zapwire.Dial and zapwire.NewServer now require a *zwing.Config carrying a LocalIdentity — there is no cleartext mode. Every netrunner control connection is X-Wing-encapsulated, ChaCha20-Poly1305-encrypted, and identity-pinned via Ed25519 + ML-DSA-65 hybrid signatures. Wire format and opcode set are unchanged; only the dial/listen seams are upgraded. The 14 e2e tests are updated to mint ephemeral identities per test (newTestRig) and pin the server side, which also proves the handshake actually authenticates. Pairs with luxfi/zwing v0.2.1 (DialZAP / ListenZAP) and luxfi/api v1.0.10 (zap.NewListener).