mirror of
https://github.com/hanzoai/bootnode.git
synced 2026-10-25 02:31:30 +00:00
Deny-by-default on the ONE cross-tenant infra route, enforced on both the standalone fleet_app and the mounted api/fleets router: unauthenticated -> 401 · invalid token -> 401 · non-admin -> 403 · admin -> 200 Adversarial test exercises the gate end-to-end over real HTTP; only JWKS verification and the luxd RPC collector are stubbed.