T

Admin 92f4787146 M2 §2: run actions and manifest fetch over mTLS with Maestro's identity

Extract maestroTransport() (Maestro's identity cert + instance CA) and
expose PeerTransport()/Scheme()/InsecureInternal() so every service peer
edge uses the same client. RunAction now targets
https://{ip}:{port}/action/{name} presenting Maestro's cert (services
require a CA-issued client cert, so only Maestro can drive actions — T4)
and FetchManifestWithRetry fetches /_manifest the same way.
INSECURE_INTERNAL=1 keeps the dev fleet plaintext (debug compose updated
to set it).

2026-08-16 01:12:01 +01:00

.gitea/workflows

fix: Tighten license autocommit bot to PRs, implement .licenseignore for ignoring specific files or directories

2026-08-04 23:34:46 +01:00

.vscode

real init

2026-07-29 01:36:09 +01:00

src

M2 §2: run actions and manifest fetch over mTLS with Maestro's identity

2026-08-16 01:12:01 +01:00

.dockerignore

real init