zeekay 75fa3d51e0 Deliver control traffic in the order it was sent ...

Only the dialing side recorded which underlays it held, so on the
controller the high-priority underlay drained the default queue too,
and back-to-back default messages to a router crossed two connections
and could arrive swapped.  The router data model applies change sets
by index and discards one older than what it holds, so an overtaken
change set was lost for good: an identity could reach the router
without the policy that lets it dial.

Only default underlays drain the default queue now, a high-priority
underlay carries high-priority traffic alone, and a failed write is
reported instead of requeued behind later messages.  High-priority
traffic still rides the default underlay while no high-priority one is
connected, and losing the last one wakes the default underlay at once.

Claude-Session: https://claude.ai/code/session_01HuMDfgFssPUptYUzgZ6Cp8

2026-09-23 20:54:23 -07:00

..

cli_tests

Rename the environment contract to ZT_

2026-09-23 00:57:09 -07:00

pki

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

shaper

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

testdata

Rename the environment contract to ZT_

2026-09-23 00:57:09 -07:00

testutil

Merge upstream/main: sync with openziti (15 commits)

2026-02-22 00:49:18 -08:00

.gitignore

Fix failing tests

2025-03-18 16:00:40 -04:00

accept_manual_start_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

addressable_terminators_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

api_client_client.go

Rename the environment contract to ZT_

2026-09-23 00:57:09 -07:00

api_client_management.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

api_error_test.go

Replace circuit fault logs with metrics

2025-11-12 17:13:34 -05:00

api_session_cert_connect_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

api_session_certificates_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

api_session_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

api_session_totp_token_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

ats-ctrl.yml

Rename the environment contract to ZT_

2026-09-23 00:57:09 -07:00

ats-edge-tunneler.router.yml

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

ats-edge.router.yml

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

ats-transit.router.yml

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

auth_cert_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

auth_external_jwt_signer_test.go

Trust a signer's keys for minutes, not a second

2026-09-23 01:05:03 -07:00

auth_oidc_refresh_test.go

zt: build against the hanzozt forks

2026-07-30 05:50:42 -07:00

auth_oidc_test.go

zt: build against the hanzozt forks

2026-07-30 05:50:42 -07:00

auth_perf_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

auth_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

auth_updb_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

authenticate.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

authenticator_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

ca_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

ca_traffic_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

cert_request_extend_legacy_auth_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

cert_request_extend_oidc_auth_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

config_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

config_type_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

context_json.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

context.go

Rename the environment contract to ZT_

2026-09-23 00:57:09 -07:00

control.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

current_identity_test.go

Replace circuit fault logs with metrics

2025-11-12 17:13:34 -05:00

custom_assertions.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

data_flow_close_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

data_flow_hs_rotating_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

data_flow_hs_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

data_flow_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

dialer_identity_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

edge_router_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

edge_router_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

endpoint_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

endpoints

Endpoint management updates

2025-02-03 18:52:57 -05:00

enrollment_ca_auto_specific_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_ca_auto_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_identity_extend_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_network_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_ott_specific_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_ott_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_refresh_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

enrollment_router_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_token_to_cert_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_token_to_token_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_updb_specific_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

enrollment_updb_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

entities.go

Rename the environment contract to ZT_

2026-09-23 00:57:09 -07:00

events_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

external_jwt_signer_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

identity_api_session_activity_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

identity_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

link_test.go

Merge upstream/main: sync with openziti (15 commits)

2026-02-22 00:49:18 -08:00

list_services_perf_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

main_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

mfa_zt_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

model_sdk_performance_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

network_jwt_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

permission_loss_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_api_session_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_auth_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_authenticator_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_ca_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_config_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_config_type_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_edge_router_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_edge_router_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_enrollment_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_external_jwt_signer_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_identity_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_posture_check_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_service_edge_router_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_service_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_service_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_terminator_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_test_helper.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

permissions_transit_router_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_domain_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_mfa_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_os_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_process_multi_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_sdk_domain_legacy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_sdk_domain_oidc_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_sdk_mac_oidc_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_sdk_os_oidc_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_sdk_process_multi_oidc_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

posture_check_sdk_process_oidc_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

rest_auth_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

root_endpoint_test.go

fixes #2026 root version handlers 404

2024-05-08 10:33:50 -04:00

router_data_model_order_test.go

Deliver control traffic in the order it was sent

2026-09-23 20:54:23 -07:00

router_data_model_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

router_identities_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

router_reenroll_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

sdk_api_session_token_update_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

sdk_auth_test.go

rebrand: openziti → hanzozt (Hanzo Zero Trust)

2026-02-18 16:13:53 -08:00

sdk_event_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

service_edge_router_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

service_list_refresh_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

service_policy_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

service_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

specs_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

standard_error_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

standard.go

Optimize imports

2026-01-28 15:01:35 -05:00

sticky_terminator_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

terminator_test.go

Replace circuit fault logs with metrics

2025-11-12 17:13:34 -05:00

terminator_update_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

transit_router_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00

tunneler_data_flow_test.go

rename: ziti → zt across all paths

2026-02-18 18:34:19 -08:00