28694167851
96%

Ran 04 Jul 2026 03:57AM UTC

Jobs 1

Files 25

Run time 1min

Badge

Embed ▾

Committed 04 Jul 2026 03:55AM UTC coverage: 96.851% (+0.005%) from 96.846%

Build # 28694167851

Build Type

push

github

Committed by

floatdrop

Commit Message

tls: kernel-switch eligibility + parameter composition (kTLS slice 3)

The planned record-boundary counter turned out unnecessary. At
handshake completion, any application-epoch byte the client sent must
sit in exactly one of three places: the connection's wire staging
(unfed — the caller's check), the pair's read side (SSL_get_rbio +
BIO_ctrl_pending), or buffered inside the SSL (SSL_has_pending). All
empty means the RX record sequence is exactly zero — nothing to
parse, nothing to miscount. Channel.kernel_switch_eligible performs
the channel-visible checks; Channel.kernel_parameters composes the
per-direction kernel install for a server-role connection (transmit
under the server traffic secret, receive under the client's).

Tests: a clean handshake is eligible and the composed parameters
match direct derivation; a request pipelined into the same flight as
the client Finished defeats eligibility and is still delivered intact
by the userspace relay — the miss costs performance, never
correctness. DESIGN §6 updated to record the simplification.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Coverage Stats

5443 of 5620 relevant lines covered (96.85%)

0.97 hits per line

Coverage Regressions

Lines	Coverage	∆	File
13	96.23	0.22%	tls/terminator.zig
1	95.96	0.0%	tls/openssl.zig

Jobs

ID	Job ID	Ran	Files	Coverage
1	28694167851.1	04 Jul 2026 03:57AM UTC	25	96.85	GitHub Action Run

floatdrop / zoxy / 28694167851
96%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28694167851

floatdrop / zoxy / 28694167851 96%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 28694167851

floatdrop / zoxy / 28694167851
96%

README BADGES
x