Current lab status 2026-09-12
This commit is contained in:
commit
870550646d
11 changed files with 308 additions and 0 deletions
6
decisions/D004-leaf-accounts.md
Normal file
6
decisions/D004-leaf-accounts.md
Normal file
|
|
@ -0,0 +1,6 @@
|
|||
# D004 — Leaf cannot touch billing, even if authz is skipped
|
||||
|
||||
**Status:** accepted
|
||||
**Step:** 4
|
||||
|
||||
`verae-nats-accounts/policy.json` is the allow-list. access-leaf refuses any target not in the leaf set. nats.conf documents INTERNAL vs LEAF accounts for when the lab cluster is replaced with a real accounts-enabled nats-server.
|
||||
Loading…
Add table
Add a link
Reference in a new issue