ScadaBridge

Files

T

Joseph Doherty 559e02f5c8 feat(transport): production-boundary signing advisory, secret-key proof, runbook (#110 )

Owner decisions on #110: one signing key per environment; TrustedKeys stay hand-edited;
Signing:ProductionBoundary (new, default off) logs a startup warning and reports a Degraded
bundle-signing-policy /health/ready entry while RequireSignedBundles is off; the private key
is read via ${secret:} (proved end to end, never logged); cluster pull decided not to be
built; differential deletions stay deferred. Adds docs/operations/bundle-signing-runbook.md.

Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV

2026-11-09 22:50:18 -05:00

Encryption

docs(tests): fix CommentChecker findings across tests/ — 13,392 → 0 (repo-wide scan clean)

2026-10-07 15:05:49 -04:00

Export

fix(transport): export reads instance children once, site connections once per site, composed templates in batches (review 2026-10-21 04/P5)

2026-10-22 09:38:16 -04:00

Import

fix(transport): pin a compressed copy of the decrypted bundle on the import session, release the upload buffer early, document the footprint (review 2026-10-21 04/M2)

2026-10-22 09:38:16 -04:00

Serialization

feat(native-alarms): per-binding IsMesReportable on native alarm source bindings (ScadaBridge#59)