| Age | Commit message (Expand) | Author | Files | Lines |
| 16 hours | docs: record the fourth property and the contacts command | Danilo M. | 1 | -9/+5 |
| 16 hours | fix: keep ":" literal so an IPv6 query is not over-encoded | Danilo M. | 1 | -6/+15 |
| 16 hours | feat: add the contacts subcommand | Danilo M. | 1 | -1/+53 |
| 16 hours | fix: percent-encode the component interpolated into an RDAP query | Danilo M. | 1 | -2/+23 |
| 16 hours | fix: refuse an ipv6 scope id, and say why a value was refused | Danilo M. | 1 | -9/+49 |
| 16 hours | fix: validate a query host at the one point a query is admitted | Danilo M. | 1 | -1/+54 |
| 16 hours | fix: treat the IANA bootstrap as hostile, not as trusted input | Danilo M. | 1 | -9/+60 |
| 17 hours | feat: resolve the worklist to abuse contacts | Danilo M. | 1 | -0/+60 |
| 17 hours | feat: build the contacts worklist, host only | Danilo M. | 1 | -0/+108 |
| 17 hours | feat: query RDAP, walking up the labels for a registrable domain | Danilo M. | 1 | -0/+53 |
| 17 hours | feat: read abuse addresses from a jCard, strictly | Danilo M. | 1 | -0/+87 |
| 17 hours | feat: select an RDAP server by longest prefix and by TLD | Danilo M. | 1 | -0/+52 |
| 17 hours | feat: cache the IANA bootstrap, and prefer a stale copy to none | Danilo M. | 1 | -0/+59 |
| 17 hours | feat: add the RDAP transport, with a redirect cap and no downgrade | Danilo M. | 1 | -0/+72 |
| 33 hours | feat: report List-Unsubscribe urls and a differing Sender | Danilo M. | 2 | -2/+34 |
| 33 hours | feat: flag an address spoofed into a display name | Danilo M. | 1 | -1/+48 |
| 33 hours | fix: take the sender domain from the address, not the display name | Danilo M. | 1 | -3/+30 |
| 35 hours | fix: prefer the observed address over an attacker's HELO literal | Danilo M. | 1 | -9/+27 |
| 35 hours | fix: re-bracket an IPv6 host when stripping URL userinfo | Danilo M. | 1 | -2/+12 |
| 35 hours | fix: redact a valueless query token whole, not as a kept name | Danilo M. | 2 | -5/+49 |
| 35 hours | fix: validate each setup answer at the prompt that asked for it | Danilo M. | 1 | -34/+101 |
| 36 hours | feat: command line for init and parse | Danilo M. | 2 | -0/+234 |
| 36 hours | feat: first-run config builder | Danilo M. | 1 | -0/+295 |
| 36 hours | fix: reject non-list relays and empty cases values | Danilo M. | 1 | -2/+20 |
| 36 hours | feat: read and validate the config | Danilo M. | 1 | -0/+86 |
| 36 hours | refactor: one URL scan serving both the report and the flagging | Danilo M. | 1 | -29/+24 |
| 36 hours | feat: assemble IOCs in the manifest's shape | Danilo M. | 1 | -0/+105 |
| 36 hours | feat: case directory with an atomically written manifest | Danilo M. | 1 | -0/+132 |
| 36 hours | feat: extract URLs and attachment hashes, fetching nothing | Danilo M. | 1 | -0/+120 |
| 36 hours | feat: extract sender domains and auth verdicts | Danilo M. | 1 | -1/+68 |
| 36 hours | feat: walk the Received chain to the trust boundary | Danilo M. | 1 | -0/+114 |
| 36 hours | fix: redact fragment and strip userinfo, flag hidden query in path | Danilo M. | 1 | -11/+69 |
| 36 hours | feat: redact recipient identifiers inside URLs | Danilo M. | 1 | -0/+105 |
| 36 hours | feat: package skeleton | Danilo M. | 1 | -0/+17 |