Issues

• Crypto: post-quantum ciphers for the stack (investigate — deliberately last)

  enhancement
  shsingh/opensase#30 · Filter by author shsingh opened on Oct 1, 2026

• Packaging: compose profiles — bare-minimum decrypt vs full appliance

  enhancement
  shsingh/opensase#29 · Filter by author shsingh opened on Oct 1, 2026

• GPU/ML module (parked): semantic DLP, injection classifiers, local LLM judge

  enhancement
  shsingh/opensase#28 · Filter by author shsingh opened on Oct 1, 2026

• Chat: Prosody XMPP server + inspection component (family chat on the edge)

  enhancement
  shsingh/opensase#27 · Filter by author shsingh opened on Oct 1, 2026

• DLP verdicts: LEAK_BLOCK joins INFECTED (secret/credential egress)

  enhancement
  shsingh/opensase#26 · Filter by author shsingh opened on Oct 1, 2026

• DNS-layer policy: dnsmasq RPZ + query logging into the decision log

  enhancement
  shsingh/opensase#25 · Filter by author shsingh opened on Oct 1, 2026

• ZTNA-lite: identity-aware access to internal services (parked)

  enhancement
  shsingh/opensase#24 · Filter by author shsingh opened on Oct 1, 2026

• Identity: step-ca integration — short-lived device certs, passive revocation

  enhancement
  shsingh/opensase#23 · Filter by author shsingh opened on Oct 1, 2026

• QUIC / HTTP-3: fail-closed first, then interception parity

  enhancement
  shsingh/opensase#22 · Filter by author shsingh opened on Oct 1, 2026

• LLM provider egress: per-device authorization + counters (lightweight)

  enhancement
  shsingh/opensase#21 · Filter by author shsingh opened on Oct 1, 2026

• Agent traffic: MCP tool calls as a first-class policy category

  enhancement
  shsingh/opensase#20 · Filter by author shsingh opened on Oct 1, 2026

• Home appliance: per-device policy + family visibility (Pi-hole-plus)

  enhancement
  shsingh/opensase#19 · Filter by author shsingh opened on Oct 1, 2026

• Policy: fail-mode verdict test suite (splice / bump / INFECTED decision-log samples)

  enhancement
  shsingh/opensase#15 · Filter by author shsingh opened on Sep 30, 2026
  1

• Observability: decision-log export + metrics endpoint

  enhancement
  shsingh/opensase#16 · Filter by author shsingh opened on Sep 30, 2026

• Policy: remote category-list feeds with signed updates + hot reload

  enhancement
  shsingh/opensase#14 · Filter by author shsingh opened on Sep 30, 2026

• VPN: default to tls-crypt once OpenVPN Connect (iOS) supports it

  enhancement
  shsingh/opensase#12 · Filter by author shsingh opened on Sep 30, 2026

• VPN: IPv6 tunnel + egress support

  enhancement
  shsingh/opensase#13 · Filter by author shsingh opened on Sep 30, 2026

• VPN: certificate renewal / rotation workflow (vpn-renew, expiry checks, client re-export)

  enhancement
  shsingh/opensase#11 · Filter by author shsingh opened on Sep 30, 2026

• Kubernetes: ship prebuilt kustomize manifests + deployment docs

  enhancement
  shsingh/opensase#10 · Filter by author shsingh opened on Sep 30, 2026
  1

  

• Images: cosign signing + provenance attestations in the release pipeline

  enhancement
  shsingh/opensase#9 · Filter by author shsingh opened on Sep 30, 2026
  

• Images: publish multi-arch (amd64 + arm64) GHCR images

  enhancement
  shsingh/opensase#8 · Filter by author shsingh opened on Sep 30, 2026