Add launch hardening gates

docs/PUBLIC_READINESS.md

@@ -10,8 +10,8 @@ model is in `docs/THREAT_MODEL.md`. Native v1 is now substantially implemented:
 native key-exchange + user auth, host-key pinning/trust, `-L`/`-R`/`-D` forwarding,
 `dosh doctor`, token-bucket auth rate limiting, and fuzz-smoke CI all exist (see the
 feature matrix and the verification-checklist status table below). It is **not yet
-fully verified**: long sleep/roaming soak, adversarial UDP forwarding tests, deeper
-fuzzing, protocol-version compatibility policy, and external review are still open.
+fully verified**: long sleep/roaming soak, packet-loss recovery for forwarding,
+deeper fuzzing results, and external review are still open.
 Until the verification checklist (`NATIVE_V1_SPEC.md` section 16) is green and that
 review is done, Dosh's defensible public security claim remains fast encrypted native
 attach/reconnect with SSH-equivalent transport security and an explicit SSH bootstrap
@@ -63,8 +63,8 @@ with ordinary SSH.
 | `authorized_keys` policy enforcement | no | yes, `from=`/`no-port-forwarding`/`permitopen=`, unsupported fail closed | implemented |
 | `dosh doctor` diagnostics | no | yes, config/auth/UDP/forwarding-policy check | implemented |
 | Encrypted UDP terminal data | yes | yes | ready |
-| Roaming by client address change | yes | yes | implemented; needs more hostile-network/soak proof |
-| Survive sleep or network loss | yes | yes | needs long-running soak tests |
+| Roaming by client address change | yes | yes | implemented; hostile-network covered, 30-minute soak gate available |
+| Survive sleep or network loss | yes | yes | implemented; run `make soak-local` before public launch |
 | Fast repeat attach without SSH | no | yes, via attach tickets | core differentiator |
 | Resident server daemon | no | yes | core differentiator |
 | One UDP port for all sessions | port range by default | yes | ready |
@@ -78,9 +78,9 @@ with ordinary SSH.
 | Unicode edge-case handling | strong | basic terminal emulator dependent | not parity |
 | X11 forwarding | no | no | non-goal unless tunneled separately |
 | SSH agent forwarding | no | yes, explicit `-A` / `forward_agent` plus server allow-list | implemented; opt-in only |
-| Local TCP forwarding, `-L` | no | yes, native encrypted stream mux | implemented; load/priority tested, adversarial UDP pending |
-| Remote TCP forwarding, `-R` | no | yes, loopback bind by default | implemented; adversarial UDP pending |
-| Dynamic SOCKS forwarding, `-D` | no | yes, SOCKS5 over native streams | implemented; adversarial UDP pending |
+| Local TCP forwarding, `-L` | no | yes, native encrypted stream mux | implemented; load/priority and replay/reorder tested; packet-loss recovery pending |
+| Remote TCP forwarding, `-R` | no | yes, loopback bind by default | implemented; packet-loss recovery pending |
+| Dynamic SOCKS forwarding, `-D` | no | yes, SOCKS5 over native streams | implemented; packet-loss recovery pending |
 | Forward-only / background forwarding, `-N` / `-f` | no | yes, `-f` requires `-N` | implemented |
 | Per-stream flow control / terminal priority | no | yes, windowed credit per stream | implemented; covered by blocked-stream and local-forward load tests |
 
@@ -130,7 +130,9 @@ Implemented:
 
 Still open before claiming forwarding parity:
 
-- A dedicated dropped/reordered/replayed-UDP forwarding test suite.
+- Reliable packet-loss recovery for forwarded stream data. Reorder and replay are
+  covered by `forwarded_stream_data_survives_reorder_and_rejects_replay`; true
+  dropped `StreamData` recovery requires stream retransmission.
 - More real-host load soak. The integration suite already covers terminal-priority
   behavior while a local forward is under blocked-stream pressure.
 
@@ -162,19 +164,18 @@ from code; in progress = partially implemented; pending = not yet implemented.
 | `-f -N -L` backgrounds only after listener readiness | done | `spawn_background_forwarder` waits for a readiness token. |
 | Multiple forwards in one command | done | Forward lists parsed and started together. |
 | `dosh doctor` identifies UDP-blocked/auth-denied/mismatch/forwarding-denied | done | `run_doctor_command` reports each state. |
-| Closing laptop 30+ min does not kill session | in progress | Long `client_timeout_secs` + resume; 30-min soak evidence pending. |
+| Closing laptop 30+ min does not kill session | in progress | `sleep_roaming_soak_30m` is an ignored launch gate; run `make soak-local` for 1800s evidence. |
 | Three concurrent terminals independent unless named | done | Generated session names per attach; named sessions shared on purpose. |
 | Large forwarded transfers add no visible input lag | done | Covered by the local-forward bulk-load integration test; still needs real-host soak before launch claims. |
-| Fuzz targets run in CI | done | `fuzz/` has parser/auth targets and CI runs a nightly `fuzz-smoke` job when cargo-fuzz is available. |
+| Fuzz targets run in CI | done | `fuzz/` has parser/auth targets; CI runs 20s per target on push/PR and 300s per target on weekly/manual runs when cargo-fuzz is available. |
 | Threat model updated with accepted residual risks | done | `docs/THREAT_MODEL.md`. |
 
 Additional security hardening tracked outside the section 16 list:
 
 - Full per-IP token-bucket rate limiting: implemented for native auth and covered by
   unit/integration tests. It still needs real-host tuning under abusive traffic.
-- Protocol VERSION handling: current behavior is single-version, fail-closed reject
-  at the packet/header and native-handshake layers. Future multi-version
-  compatibility/downgrade policy is still open.
+- Protocol VERSION handling: v1 policy is single-version, fail-closed reject at the
+  packet/header and native-handshake layers. See `docs/PROTOCOL_VERSIONING.md`.
 - ECDSA P-256 / SHA-2 RSA user keys: implemented for ssh-agent and OpenSSH
   identity-file native auth. RSA is compatibility-only and uses SHA-2 signatures;
   legacy SHA-1 `ssh-rsa` signatures are not accepted.
@@ -182,12 +183,17 @@ Additional security hardening tracked outside the section 16 list:
 ## Before Public Launch
 
 - Keep `cargo test`, `make bench-docker-ssh`, and `make bench-docker-mosh` green.
+- Run `make soak-local` before launch to produce 30-minute sleep/roaming evidence.
+- Run `make fuzz-deep` before launch, or use the scheduled/manual CI fuzz pass, and
+  publish the target durations.
 - Keep scripted TUI tests green and add a broader app matrix for real alternate-screen
   tools.
 - Publish benchmark output with raw samples, not just averages.
 - Mark prediction as experimental until it has a real framebuffer model.
 - Stress-test `persist_sessions = true` before making restart-survivable holders the
   default.
+- Add reliable retransmission for forwarded stream data before claiming TCP
+  forwarding survives arbitrary UDP packet loss.
 - Tune the native auth token bucket under abusive real-host traffic.
 - Complete the native-v1 verification checklist above and an external security review
   before making any "native SSH replacement" claim (`NATIVE_V1_SPEC.md` section 17).