docs: resolve clean-host deployment audit

This commit is contained in:
2026-07-10 02:51:29 +08:00
parent 90cbd74562
commit 5e412761d2
10 changed files with 296 additions and 3 deletions
+2 -1
View File
@@ -28,6 +28,8 @@ recovery procedures, and no known critical security or data-integrity gaps.
## Decisions so far
- [Audit the clean-host deployment and rollback contract](issues/01-audit-clean-host-deployment.md) — keep the accepted single-host topology, but replace the incomplete in-place updater with a provisioned, immutable, readiness-gated and rollbackable release contract.
## Fog
- The production topology after the initial single-host pilot (HA, horizontal
@@ -38,4 +40,3 @@ recovery procedures, and no known critical security or data-integrity gaps.
initial safety and operability route is clear.
- Regulatory retention, residency, and customer-specific compliance controls
require product/legal inputs that the repository does not currently contain.