Release history
Changelog
LYNX — An independent, privacy-focused web search engine — no query logs, explainable ranking, and crawler ethics as a structural constraint.
v0.1.0Oct 2026Design release
- Two-plane architecture split: query plane never touches untrusted content, crawl plane never sees a user query
- Threat model with 35 numbered threats, each with impact, likelihood, mitigation and residual risk
- Privacy model: five rules, four mechanisms, and a data inventory with a retention class per category
- Ranking design with named BM25F field weights and an explainability contract
- SSRF defence specified as layered, IP-authoritative, and re-run at every redirect hop
- Data model: 30+ entities with a schema-level guarantee that no table can hold a search query
v0.1.0-rcSep 2026Scaffolding
- Cargo and pnpm workspaces with unsafe_code forbidden workspace-wide
- Local Docker Compose stack including an adversarial fixture origin for gzip bombs and private-address redirects
- Ten GitHub Actions workflows and a make verify gate with a privacy guard job
- Supply-chain controls: pinned toolchain, cargo deny, SBOMs, images pinned by digest
