Block a user
Mesh command/ack planes are h2c-only — the per-cluster PSK crosses the network in cleartext on a write surface (accept, or add a UseTls option)
AdminUI: DriverStatusPanel (Restart/Reconnect driver controls) is orphaned — referenced by no page
FleetStatusBroadcaster is blind to site nodes post-Phase-6 mesh split (fleet-wide gossip assumption)
Three pre-existing gRPC auth interceptors accept a whitespace-only configured key as SET (IsNullOrEmpty vs IsNullOrWhiteSpace)
Flaky test: ConfigPublishCoordinatorTimeoutTests.DeadlineElapsed_for_current_deployment_marks_TimedOut races its own 150 ms wall-clock deadline
Three pre-existing gRPC auth interceptors accept a whitespace-only configured key as SET (IsNullOrEmpty vs IsNullOrWhiteSpace)
Fixed, merged to master @ 1df84703 and pushed (commit f10f4c37, doc follow-up 48707852).
All three interceptors now guard with string.IsNullOrWhiteSpace (Telemetry→PermissionDenied,…
Flaky test: ConfigPublishCoordinatorTimeoutTests.DeadlineElapsed_for_current_deployment_marks_TimedOut races its own 150 ms wall-clock deadline
Fixed, merged to master @ 1df84703 and pushed (commit 722a222d, test-only).
Took option 2: the NodeDeploymentState row is now seeded before the coordinator spawns (closing the…
Mesh command/ack planes are h2c-only — the per-cluster PSK crosses the network in cleartext on a write surface (accept, or add a UseTls option)
Resolved by recording the accepted posture — option 1, merged to master @ 1df84703 and pushed (commit 17a822b7, docs-only).
**Decision: accept the risk and record it once, for all five…
AdminUI: DriverStatusPanel (Restart/Reconnect driver controls) is orphaned — referenced by no page
Fixed, merged to master @ 9420f8ef and pushed (branch fix/issue-546-panel, commits d33e4e20 + e669fb34).
Decision: wire it in — the commands were proven end-to-end over the gRPC…
FleetStatusBroadcaster is blind to site nodes post-Phase-6 mesh split (fleet-wide gossip assumption)
Fixed by deletion, merged to master @ d01b717e and pushed (branch fix/issue-542-fleetstatus, commits f1c18811 + b5607d35).
**Why deletion rather than the suggested cross-mesh…
1df8470356
Merge fix/issues-543-544-545: whitespace-key fail-closed backport (#543), de-flaked deadline test (#544), h2c accepted-posture record (#545)
4870785209
docs(auth): #543 add the one-public-ctor remarks paragraph to the two newly-pinned interceptors
b5607d355a
refactor(fleet): #542 review residue — drop dead proxyOptions local, retire stale compliance defer line
63cf4c6f0c
docs(index): OtOpcUa Phase 3 ClusterClient deletion MERGED to master @ 2fa880b6; only the Phase 4 terminal gate remains
2fa880b6fc
Merge feat/grpc-phase3-deletion: delete the Akka ClusterClient cross-mesh transport (Phase 3)
f8a43dfe96
docs(plans): Phase 3 COMPLETE at DoD — deletion review-approved, grep-gates clean, full suite 9326/0 green on branch tip
8e25ed55f6
docs: fix two stale mesh-program claims found in review (Phase 5 gate passed; Phase 6 ended fleet-wide gossip)
406b1ae5ac
docs(mesh): sweep for ClusterClient deletion — Dps|Grpc only, CentralContactPoints retired
cd7135570c
refactor(mesh): collapse MeshPaths to local actor names — no longer a wire contract (review follow-up)
0e416cac0a
docs(index): OtOpcUa ClusterClient→gRPC migration — Phases 0-2 merged (rig default Grpc), Phase 3 deletion complete on branch pending merge
5510452662
docs(plans): Phase 2 COMPLETE — gate PASS 8/8, soak 14/14 clean, full suite exit 0 on cutover SHA; carry-forwards closed/re-carried
eaf14e0177
docs(plans): Phase 2 check 8 PASS — full suite exit 0 on the cutover SHA, run against the live rig
bcc91268ba
docs(plans): Phase 2 gate — checks 1-6 + PSK negatives PASS with evidence; soak + full suite running
caf2eec66b
feat(mesh): Phase 2 cutover — docker-dev rig default MeshTransport mode flips ClusterClient → Grpc
027f0403c4
test(mesh): role-scoping scan handles braceless if (hasAdmin) — closes the phantom-block false pass
7203d135fc
Merge Phase 1B: gRPC ApplyAck path (CentralCommandGrpcService + GrpcApplyAckSender) — live gate PASS 7/7
cf229a9579
docs(plans): phases 2-4 — targeted-test policy + Task 2.0 (must-fix: honest PreStart-race logging) before the cutover
b360239e5e
merge: ClusterClient→gRPC Phase 1A — central→node command plane over gRPC (NodeCommandService on the telemetry listener, MeshGrpcCommandDialer, third mode branch in CentralCommunicationActor; security-register items 1-2 closed, gate follows the endpoint; live gate PASS 8/8 on re-run after the starter-order boot defect was found live and fixed; #544/#545/#546 filed)
e54883a8e0
fix(mesh): memoize dialer/provider on first use — a lost PreStart race self-heals at the first refresh (review-prescribed)
AdminUI: DriverStatusPanel (Restart/Reconnect driver controls) is orphaned — referenced by no page