|
|
40c7a93951
|
docs: add future work items 6-8 and clarify design doc safety gate
- Future Work §6: validate_host() implementation plan (CN allowlist,
admin-cn flag, reject/log unauthorised OP_upgradeConfig requests)
- Future Work §7: OP_replConfig access control hardening (peer
validation, rate-limiting, minimum_role check)
- Future Work §8: lost_and_found reserved-name validation in admin
config tool, with migration path for pre-existing clusters
- config-replication-design.md: expand CONF_ENABLE_UPGRADE_CONFIG
safety gate section with gating prerequisites
|
2026-05-13 18:21:44 +00:00 |
|
