From b5cebf9fa63c0e3d024c3d736d697f170fb83995 Mon Sep 17 00:00:00 2001
From: Joseph Doherty <dohejw01@gmail.com>
Date: Thu, 22 Oct 2026 09:01:50 -0400
Subject: [PATCH] fix(host): bind ConfigAuditOptions with ValidateOnStart on
 central (review 2026-10-21 08/G1 purge wiring)

---
 src/ZB.MOM.WW.ScadaBridge.Host/Program.cs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs b/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs
index bd73e44f..a5dd3e30 100644
--- a/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs
+++ b/src/ZB.MOM.WW.ScadaBridge.Host/Program.cs
@@ -521,6 +521,9 @@ try
         var configDbConnectionString = configuration["ScadaBridge:Database:ConfigurationDb"]
             ?? throw new InvalidOperationException("ScadaBridge:Database:ConfigurationDb connection string is required for Central role.");
         builder.Services.AddConfigurationDatabase(configDbConnectionString);
+        builder.Services.AddOptions<ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Maintenance.ConfigAuditOptions>()
+            .Bind(configuration.GetSection(ZB.MOM.WW.ScadaBridge.ConfigurationDatabase.Maintenance.ConfigAuditOptions.SectionName))
+            .ValidateOnStart();
 
         // Health checks for readiness gating — shared ZB.MOM.WW.Health probes.
         // Ready tier (/health/ready): database + akka-cluster + required-singletons.