Daemon pre-launch reliability + data-plane trust gate (default-off) + PII redaction#417
Merged
Merged
Conversation
…+ PII redaction WS6 reliability (always-on): registry-pool half-open detect (idle-ping 30s + pong deadline 10s -> reconnect), per-request resolve deadline, rx-watchdog restart-loop breaker. WS1 data-plane trust: StrictDataPlaneTrust control-path gate, DEFAULT FALSE + bypassed on Public nodes (wire-compatible, not enforcing until enabled). WS4 (partial): redactID helper for pre-trust identifiers. Excludes/parks for follow-up: a non-compiling test importing nonexistent pilot-router-poc/router, relay-debug scaffolding, real-network relayonly integration tests, unrelated catalogue/workflow. No enforcement flag default flipped. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| if d.regConn != nil { | ||
| d.regConn.Close() | ||
| if d.reg() != nil { | ||
| d.reg().Close() |
…(default off) Makes the WS1 StrictDataPlaneTrust gate flippable in prod. Default false + bypassed on Public nodes — no behavior change, wire-compatible with old agents. Enforcement stays deferred. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Makes the daemon-side hardening durable in git (WS1/WS4/WS6).
WS6 reliability (always-on) — the local-daemon + fleet wedge fixes: registry-pool half-open detection (idle-ping + pong deadline → reconnect), per-request resolve deadline (no more hangs), rx-watchdog restart-loop breaker.
WS1 data-plane trust (default-off) —
StrictDataPlaneTrustcontrol-path gate, default false, bypassed on Public nodes → wire-compatible, not enforcing until enabled.WS4 (partial) —
redactIDhelper for pre-trust identifiers.Excluded/parked (follow-up, in session scratchpad): a non-compiling test (imports nonexistent
pilot-router-poc/router), relay-debug scaffolding, real-network relayonly integration tests, unrelated catalogue+workflow. No flag default flipped. Stagedpkg/daemoncode builds + vets clean + tests green (2 unrelated IPC test failures are the macOS unix-socket path-length limit, pass on Linux CI).🤖 Generated with Claude Code