George Lambert
9ba17747a4
Some checks are pending
review / inventory (push) Waiting to run
GATE table marked deployed. Historical-Information open items closed. Admin-history seeded; PFC_REQUIRE_NPE left unset.
11 lines
1.2 KiB
Markdown
11 lines
1.2 KiB
Markdown
# UserReview
|
|
|
|
Decisions to confirm later. Work continued with guesses in `TODO-With-User.MD`.
|
|
|
|
1. **System public key custody** — lab Ed25519/X25519 generated into `keys/system/` (gitignored private). Production should be customer HSM. Rotate via signed config + admin-history cube.
|
|
2. **Cut over `PFC_REQUIRE_NPE=1` on ns1** — still not this round. `/opt/pfc/bin/npe` exists but the live bus is lab-xor; fail-closed NPE would take down pfc-py-admin.
|
|
3. **Caddy hostname** for this hub (`sync.pfc.georgelambert.org` vs a path under `docs.pfc`). Guess: path `/sync/` under existing docs host after CI.
|
|
4. **verae org** is empty — leave empty unless you want it as the canonical NATS catalog owner instead of `marchon`.
|
|
5. **Website org** — no NATS changes. Confirm if any site should deep-link the endpoint catalog.
|
|
6. **Admin console that re-signs config** — PFC console vs peergos-compliance-config TUI. Guess: both may call the same Python `signed_config.sign`; PFC console first. `POST /v1/admin/config` is live; lab login still requires TOTP.
|
|
7. **Replication backend** on ns1 `:18782`/`:8782` still 503 connection refused (pre-existing; not part of sm-leaf). Confirm whether pfc-repl should be restarted or retired.
|