Add Suricata assimilation design

This commit is contained in:
Luna 2026-07-10 04:16:31 -07:00
parent 9784033f86
commit 8d929b50bd
No known key found for this signature in database
4 changed files with 294 additions and 0 deletions

View file

@ -27,6 +27,7 @@ same patch as any command, schema, or behavior documentation changes.
| [ROADMAP.md](ROADMAP.md) | Release tracks and planned sequencing. |
| [THREAT_MODEL.md](THREAT_MODEL.md) | Trust boundaries, attacker assumptions, and non-goals. |
| [FLEET_DESIGN.md](FLEET_DESIGN.md) | Optional v1.2 collector design: enrollment, ingest, storage, and safety boundaries. |
| [SURICATA_ASSIMILATION.md](SURICATA_ASSIMILATION.md) | Design proposal: assimilate Suricata's models (rule language, sessions, DPI, EVE schema), migrate to Go, add reactive forensic capture. |
## Versioning Rules