feat(tls): single-source and activate neutral TLS + management surface - #138

Merged

cuioss-oliver merged 22 commits into

mainfrom

feature/plan-31b-neutral-tls-config-surface

Aug 1, 2026

Commits on Aug 1, 2026

feat(tls): bind neutral gateway.yaml TLS policy to the terminated listener
cuioss-oliver
committed
feat(config): add the neutral management policy block and refuse management.port in-schema
cuioss-oliver
committed
feat(tls): audit the plain-HTTP management downgrade and prove it on a sixth instance
cuioss-oliver
committed
docs(adr): record the three-way TLS classification and the two binding seams
cuioss-oliver
committed
feat(tls): give the neutral management.tls.enabled key a production consumer
cuioss-oliver
committed
fix(logging): name both downgrade doors in the management plain-HTTP WARN
cuioss-oliver
committed
docs(config): document the neutral TLS surface across all three layers
cuioss-oliver
committed
test(tls): machine-assert the single-source completion bar
cuioss-oliver
committed
docs(user): audit the config surface for secure-default vs override-route pairs
cuioss-oliver
committed
fix(it): move the plain-mgmt terminated listener off the SNI front port

cuioss-oliver
and
claude
committed
chore(simplify): move the OpenRewrite suppression onto the catch it guards

cuioss-oliver
and
claude
committed
fix(tls): fail closed on an unsupported tls.cipher_suites entry

cuioss-oliver
and
claude
committed
chore(architecture): re-enrich api-sheriff for the neutral TLS surface

cuioss-oliver
and
claude
committed
fix(config): size the policy-block map with HashMap.newHashMap
cuioss-oliver
committed
fix(tls): close the cipher-guard protocol gap and derive the fixture drift guard
cuioss-oliver
committed
test(mgmt): make the two plain-HTTP management guards able to fire
cuioss-oliver
committed
docs(tls): correct three over-claims about the neutral TLS surface
cuioss-oliver
committed
test(integration): reject bare compose entry in plain-HTTP management negative control

cuioss-oliver
and
claude
committed
docs(adr): narrow ADR-0025's environment-precedence claim to deployment-bound keys
cuioss-oliver
committed
test(tls): make the JDK cipher-support assertion non-vacuous in its own method
cuioss-oliver
committed
fix(it): derive gateway readiness targets from Compose and bound every probe
cuioss-oliver
committed
chore(simplify): drop unreachable readiness-discovery vacuity re-check

cuioss-oliver
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

feat(tls): single-source and activate neutral TLS + management surface - #138

feat(tls): single-source and activate neutral TLS + management surface#138
cuioss-oliver merged 22 commits into
mainfrom
feature/plan-31b-neutral-tls-config-surface

Commits on Aug 1, 2026

feat(tls): bind neutral gateway.yaml TLS policy to the terminated listener

feat(config): add the neutral management policy block and refuse management.port in-schema

feat(tls): audit the plain-HTTP management downgrade and prove it on a sixth instance

docs(adr): record the three-way TLS classification and the two binding seams

feat(tls): give the neutral management.tls.enabled key a production consumer

fix(logging): name both downgrade doors in the management plain-HTTP WARN

docs(config): document the neutral TLS surface across all three layers

test(tls): machine-assert the single-source completion bar

docs(user): audit the config surface for secure-default vs override-route pairs

fix(it): move the plain-mgmt terminated listener off the SNI front port

chore(simplify): move the OpenRewrite suppression onto the catch it guards

fix(tls): fail closed on an unsupported tls.cipher_suites entry

chore(architecture): re-enrich api-sheriff for the neutral TLS surface

fix(config): size the policy-block map with HashMap.newHashMap

fix(tls): close the cipher-guard protocol gap and derive the fixture drift guard

test(mgmt): make the two plain-HTTP management guards able to fire

docs(tls): correct three over-claims about the neutral TLS surface

test(integration): reject bare compose entry in plain-HTTP management negative control

docs(adr): narrow ADR-0025's environment-precedence claim to deployment-bound keys

test(tls): make the JDK cipher-support assertion non-vacuous in its own method

fix(it): derive gateway readiness targets from Compose and bound every probe

chore(simplify): drop unreachable readiness-discovery vacuity re-check