Core Concepts

In-depth exploration of the request processing lifecycle, paranoia level evaluation, payload isolation mechanisms, and unified access control.

This section introduces the foundational architecture and evaluation mechanics of CheeseWAF. Prior to tuning production paranoia levels or configuring advanced security policies, reviewing these concepts is strongly recommended:

Request Processing Pipeline

Trace the end-to-end request lifecycle across network filters, access control, AST semantic inspection, and asynchronous ALAP review.

Paranoia Level Mechanism

Detailed breakdown of paranoia levels 0 through 5, false-positive suppression strategies, and dynamic time-windowed auto-promotion.

Isolated vs. Embedded Payloads

Distinguish standalone attack payloads from benign context embedding, and understand targeted gadget isolation safeguards.

Unified Management Surfaces

Understand the shared RBAC authorization model, session mechanics, and audit trail spanning the Web console, TUI, and REST API.

Traffic Pipeline & Two-Phase Execution

Deep dive into the synchronous Two-Phase detection pipeline (Pre-Filters + Semantic Worker Pool) and the asynchronous ALAP offline review loop.

Paranoia Level Mechanism

Understand paranoia levels 0 through 5, differential actions for isolated vs. embedded payloads, and dynamic time-windowed promotion.

Isolated vs. Embedded Payloads

In-depth analysis of semantic engine payload morphology evaluation, contextual boundary detection, and targeted gadget isolation coverage.

Unified Management Surfaces & Authorization

Understand the shared RBAC authorization model, unified user identity, session management, and audit pipeline across the Web console, TUI, and REST API.

Last modified October 11, 2026 · Merge pull request #4 from LaokeQwQ/codex/one-click-install-docs-20261010 (8a1a22b)