Joseph Doherty 559e02f5c8 feat(transport): production-boundary signing advisory, secret-key proof, runbook (#110) ...

Owner decisions on #110: one signing key per environment; TrustedKeys stay hand-edited;
Signing:ProductionBoundary (new, default off) logs a startup warning and reports a Degraded
bundle-signing-policy /health/ready entry while RequireSignedBundles is off; the private key
is read via ${secret:} (proved end to end, never logged); cluster pull decided not to be
built; differential deletions stay deferred. Adds docs/operations/bundle-signing-runbook.md.

Claude-Session: https://claude.ai/code/session_01GT67AEHd2Acv1YPwGfXEoV

2026-11-09 22:50:18 -05:00

..

Component-AuditLog.md

docs(audit): Parquet cold archive shipped, default off (ScadaBridge#42)

2026-11-09 17:12:12 -05:00

Component-CentralUI.md

fix(flow-debugger): refuse method-entry Live runs for site-scoped users (#55)

2026-11-09 22:22:44 -05:00

Component-CLI.md

docs(audit): Parquet cold archive shipped, default off (ScadaBridge#42)

2026-11-09 17:12:12 -05:00

Component-ClusterInfrastructure.md

docs(plans): TLS production profile design for Traefik, Kestrel, gRPC and Akka remoting (ScadaBridge#64)

2026-11-09 17:06:01 -05:00

Component-Commons.md

Resolve all 46 low-severity architecture review findings

2026-09-09 22:56:36 -04:00

Component-Communication.md

feat(central): one central cache-invalidation topic; role-mapping and external-definition caches follow peer edits (ScadaBridge#100 item 3, ScadaBridge#83)

2026-11-09 16:04:28 -05:00

Component-ConfigurationDatabase.md

docs(config-db): fix stale AuditLog reconciliation keyset-paging line; record KPI cadence (ScadaBridge#78)

2026-11-09 18:36:02 -05:00

Component-DataConnectionLayer.md

fix(dcl): coerce scalar OPC UA writes to the node DataType (#58)

2026-11-06 16:08:33 -05:00

Component-DeploymentManager.md

feat(pending-updates): short-circuit an unchanged fleet on a DB rowversion watermark (#62)

2026-11-09 22:38:55 -05:00

Component-ExternalSystemGateway.md

feat(central): one central cache-invalidation topic; role-mapping and external-definition caches follow peer edits (ScadaBridge#100 item 3, ScadaBridge#83)

2026-11-09 16:04:28 -05:00

Component-HealthMonitoring.md

feat(health): surface pending-updates counts on the Health dashboard and CLI (ScadaBridge#63)

2026-11-09 13:18:54 -05:00

Component-Host.md

fix(inbound-api): API-method recompile/invalidate reaches the peer central node; stale doc; locked-override name rule (ScadaBridge#103)

2026-11-09 16:04:28 -05:00

Component-InboundAPI.md

fix(inbound-api): API-method recompile/invalidate reaches the peer central node; stale doc; locked-override name rule (ScadaBridge#103)

2026-11-09 16:04:28 -05:00

Component-KpiHistory.md

fix(kpi-history): fold raw samples one hour at a time; only a unique-key violation is the benign fold race (review 2026-10-21 06/PERF-6, 08/P4, 08/C3)

2026-10-22 09:38:48 -04:00

Component-ManagementService.md

fix(flow-debugger): refuse method-entry Live runs for site-scoped users (#55)

2026-11-09 22:22:44 -05:00

Component-NotificationOutbox.md

fix(notification-outbox): per-attempt timestamps, Pending/Retrying split claim + sweep budget, SMTP MaxConcurrentConnections clamp (review 2026-10-21 06/COR-1, 06/PERF-5, 06/IMPL-2)

2026-10-22 09:38:48 -04:00

Component-NotificationService.md

fix(notification-outbox): per-attempt timestamps, Pending/Retrying split claim + sweep budget, SMTP MaxConcurrentConnections clamp (review 2026-10-21 06/COR-1, 06/PERF-5, 06/IMPL-2)

2026-10-22 09:38:48 -04:00

Component-ScriptAnalysis.md

fix(scriptanalysis): warn on scripts blocking on a Task (.Result/.Wait()/GetAwaiter().GetResult()) (review 2026-10-21 01/SR-U2)

2026-10-22 06:33:44 -04:00

Component-Security.md

feat(central): one central cache-invalidation topic; role-mapping and external-definition caches follow peer edits (ScadaBridge#100 item 3, ScadaBridge#83)

2026-11-09 16:04:28 -05:00

Component-SiteCallAudit.md

fix(site-call-audit): reconciliation pull serves only un-acked tracking rows (node-local ack ledger), batched page upsert, prune removed sites' cursors (review 2026-10-21 06/PERF-2 + lane H follow-up)

2026-10-22 09:38:48 -04:00

Component-SiteEventLogging.md

fix(site-event-log): queries on own read connection off the actor thread, bounded keyword window; cap trim counts/vacuums rarely (review 2026-10-21 02/P1, 02/P4)

2026-10-22 08:32:37 -04:00

Component-SiteRuntime.md

docs(site-runtime): IsMesReportable and AckTime now ride the wire (ScadaBridge#60, #84)

2026-11-09 12:55:12 -05:00

Component-StoreAndForward.md

docs(store-and-forward): replication text is LocalDb CDC; document lane paging + gauge reseed (review 2026-10-21 02/U4a)

2026-10-22 08:32:37 -04:00

Component-TemplateEngine.md

fix(transport): case-insensitive name lookups, batch preview lookups, correct flattener doc (ScadaBridge#93)

2026-11-09 13:46:45 -05:00

Component-TraefikProxy.md

docs(cleanup): sync Traefik + Host docs to oldest-member active-node semantics + DB-gated /health/active; TLS roadmap note

2026-07-08 17:09:34 -04:00

Component-Transport.md

feat(transport): production-boundary signing advisory, secret-key proof, runbook (#110)

2026-11-09 22:50:18 -05:00

Component-TreeView.md

docs(m9): mark M9 delivered + sync TemplateEngine/TreeView/DataConnection/schema-library/CLI docs

2026-06-18 13:39:33 -04:00

HighLevelReqs.md

docs(audit): Parquet cold archive shipped, default off (ScadaBridge#42)

2026-11-09 17:12:12 -05:00