Rongsong Shen 4ec401672b fix(xcecli): restore dangling CA-cert cleanup misses, enable https support ... bug-1463: commit 94f50ce6 (bug-1453 CA-cert-plumbing removal) missed GetJobOutput's dead tls.Config/loadRootCAs block in request.go, plus peek.go's SetRootCAs call and serverInfo.CACert field access (the field no longer exists on APIServerInfo) -- broke the xcecli build. Removed all three dangling references. Also enabled NewAPIClient's previously-commented-out InsecureSkipVerify TLS config, since no xcecli method set any TLS config at all -- any https:// apiserver URL would have failed cert verification, not just GetJobOutput. Matches bug-1453's documented design (server-side TLS only, no peer verification, mTLS deferred as P3 hardening). Documented both the api-server (http+https) and controller (server-side-cert-only, no client certs) TLS postures in .kiro/steering/security.md, replacing a stale line claiming TLS is handled at the network layer, plus a follow-up note for the planned HAProxy TLS-termination reverse proxy once its cert type and apiserver's own listener fate are decided.		2026-07-23 07:28:01 +00:00
..
api-standards.md	chore: baseline snapshot — prior-session work + ha-consistency-invariants spec family	2026-06-11 13:21:50 +00:00
build-deployment.md	fix(controller): bug-1433 async-thread fdatasync block + bug-1434 committed_lsn CAS race	2026-07-11 12:16:28 +00:00
config-design.md	save status	2026-07-21 08:24:44 +00:00
error-handling.md	checkpoint: bug-851 root cause + raft TLA+ conformance spec family	2026-06-21 14:02:15 +00:00
ha-async-io.md	docs(steering): sync steering + xce-audit-invariants skill after Jul 13-18 work	2026-07-19 08:14:11 +00:00
persistence.md	fix(controller): bug-1433 async-thread fdatasync block + bug-1434 committed_lsn CAS race	2026-07-11 12:16:28 +00:00
product.md	docs(steering): sync steering + xce-audit-invariants skill after Jul 13-18 work	2026-07-19 08:14:11 +00:00
roadmap.md	save status	2026-07-21 08:24:44 +00:00
security.md	fix(xcecli): restore dangling CA-cert cleanup misses, enable https support	2026-07-23 07:28:01 +00:00
structure.md	commit missed	2026-06-16 15:42:43 +08:00
tech.md	commit missed	2026-06-16 15:42:43 +08:00
testing.md	docs(steering): sync steering + xce-audit-invariants skill after Jul 13-18 work	2026-07-19 08:14:11 +00:00