(02) fuzz - #1797

Draft

daniel-noland wants to merge 14 commits into

pr/daniel-noland/fuzz-config-generatorsfrom

pr/daniel-noland/fuzz-nf-probes

Commits on Sep 6, 2026

docs(testing): Record the config-algebra testing strategy

daniel-noland
and
claude
committed
b00c2bb
feat(config): Generate a set of static NAT exposes for one manifest

daniel-noland
and
claude
committed
287c5d2
test(nat): Drive static NAT with configuration-relative packets

daniel-noland
and
claude
committed
a78c00a
test(nat): Cover the static NAT path that maps ports as well as addresses

daniel-noland
and
claude
committed
e090c43
test(nat): Drive masquerade with configuration-relative flows

daniel-noland
and
claude
committed
519a8ce
test(acl): Carry the acl properties from the lookup to the network function

daniel-noland
and
claude
committed
3007e73
fix(acl-filter): Let the acl properties be selected, and stop miscounting denials

daniel-noland
and
claude
committed
c99f306
test(nat): Take the declared public set from the validated overlay

daniel-noland
and
claude
committed
45a7ee3
fix(nat): Let the masquerade properties be selected
daniel-noland
committed
213ff70
test(nat): Take static NAT's declared sets from the validated overlay too
daniel-noland
committed
e01d78f
fix(acl-filter): Judge the summary the packet actually carries
daniel-noland
committed
5086b82
fix(nat): Let the static NAT properties be selected
daniel-noland
committed
f5173fc
fix(nat): Give each static nat property a target name of its own

daniel-noland
and
claude
committed
17052a8
test(nat,acl-filter): Drop the absolute floor the vacuity guards carried
daniel-noland
committed
c572452