marchon/system-git-sync
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
system-git-sync/UserReview.MD
George Lambert 9ba17747a4
Some checks are pending
review / inventory (push) Waiting to run
Details
S15: ns1 deployed; stop sm-leaf before binary replace 
GATE table marked deployed. Historical-Information open items closed.
Admin-history seeded; PFC_REQUIRE_NPE left unset.
2026-09-15 22:44:51 -04:00

1.2 KiB
Raw Blame History

UserReview

Decisions to confirm later. Work continued with guesses in TODO-With-User.MD.

  1. System public key custody — lab Ed25519/X25519 generated into keys/system/ (gitignored private). Production should be customer HSM. Rotate via signed config + admin-history cube.
  2. Cut over PFC_REQUIRE_NPE=1 on ns1 — still not this round. /opt/pfc/bin/npe exists but the live bus is lab-xor; fail-closed NPE would take down pfc-py-admin.
  3. Caddy hostname for this hub (sync.pfc.georgelambert.org vs a path under docs.pfc). Guess: path /sync/ under existing docs host after CI.
  4. verae org is empty — leave empty unless you want it as the canonical NATS catalog owner instead of marchon.
  5. Website org — no NATS changes. Confirm if any site should deep-link the endpoint catalog.
  6. Admin console that re-signs config — PFC console vs peergos-compliance-config TUI. Guess: both may call the same Python signed_config.sign; PFC console first. POST /v1/admin/config is live; lab login still requires TOTP.
  7. Replication backend on ns1 :18782/:8782 still 503 connection refused (pre-existing; not part of sm-leaf). Confirm whether pfc-repl should be restarted or retired.