From 5ae006ca8b30ac6055c4b4e8718b99510a70113a Mon Sep 17 00:00:00 2001 From: Meta Vens Date: Fri, 11 Sep 2026 00:23:41 +0200 Subject: [PATCH] Doc: the route driver owns the stable endpoint's firewall allow Co-Authored-By: Claude Fable 5.1 --- docs/deployment-authority.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/docs/deployment-authority.md b/docs/deployment-authority.md index c3bd2fe..0ccda23 100644 --- a/docs/deployment-authority.md +++ b/docs/deployment-authority.md @@ -223,6 +223,9 @@ The first Yggdrasil implementation uses: - nginx stream proxying for CodexConnector's stable TCP endpoint; - atomic root-owned files for process-bound write leases and separately generated proxy membership; +- one host firewall allow per routed stable endpoint, owned by the route + driver beside its fragment: admitted with the membership, withdrawn with the + last membership, never opened by hand; - graceful nginx validation and reload for route changes. Idunn calls narrow workload, route, and write-lease/fencing driver ports. Those