mirror of
https://github.com/hanzoai/gateway.git
synced 2026-10-30 15:04:44 +00:00
zeekayandHanzo Dev
c07944817d
POST /v1/keystore and GET /v1/metrics reach the node's key management and its internals. Both were public by inheritance — open because nothing on canon said otherwise — and neither is a route anyone meant to leave open: keystore is absent from every live ConfigMap, and nothing scrapes the gateway's routed /v1/metrics. They join POST /v1/admin as stated false. The completeness check requires every route stated either way, so this is a decision now, not an omission. The drift test read its baseline from canon/main, which worked only until this change merged: after that the ref returns this very config and the check compares it against itself. The pre-migration gating is now a frozen fixture, so the property is guarded the same way in review, in CI with no remotes, and on main tomorrow. The test fails rather than skips when the baseline cannot be read. Co-authored-by: Hanzo Dev <[email protected]>