# Research workspace

**English** · [Português](README.pt-BR.md)

This directory is for scientific validation only. It is not part of the Acauã
product, is not compiled by Cargo, and is never included in a release artifact.

Use it to generate reproducible fixtures, compare implementations against
reference libraries, and run notebooks for the four detection pillars. The Rust
engine must remain the only runtime used in production.

Validation scripts and dataset references are located in [`validation/`](validation/):
- `validation/datasets.tsv`: public dataset URLs, filenames, licenses, and SHA-256 checksums.
- `validation/p1v12sim.py`: simulation and validation for Pillar 1 v1.2 (Rayleigh/Schuster).
- `validation/p2real.py`: persistent TCP session chaining validation.
- `validation/p3sim.py`, `p3hourly.py`, `p3real.py`: DNS tunnel information capacity analysis.
- `validation/mkpcap_idle.py`: synthetic fixture generator for idle TCP splitting.

```bash
cd research
python3 -m venv .venv
. .venv/bin/activate
pip install -e .
jupyter lab
```

The Python environment is isolated from the workspace. Adding a dependency here
does not add it to the shipped binary.