rcourtman
|
2cd5a784e9
|
docs: add temperature monitoring security hardening roadmap
Comprehensive security improvement plan for post-launch hardening:
Completed Fixes:
✅ SSH command injection (commit 124ab7826)
✅ Unauthorized key distribution (commit d55112ac4)
Post-Launch Tasks:
📋 #3: Socket ACL multi-tenancy improvements (v4.24.0)
- Options: per-client tokens, mutual TLS, or enhanced audit
- Addresses container compromise blast radius
📋 #4: Direct SSH fallback policy (v4.24.0)
- Options: remove entirely, opt-in with warnings, or read-only key
- Resolves tension between security and availability
📋 #5: Client resilience & observability (v4.25.0)
- Context deadlines, exponential backoff, error classification
- Circuit breaker pattern, structured metrics
- Prevents goroutine pileup and improves debuggability
Includes:
- Detailed problem statements and proposed solutions
- Security vs usability trade-offs for each option
- Testing plan and documentation improvements
- Open questions for architectural decisions
- Target timelines and decision points
This roadmap ensures we can ship the temperature monitoring feature
now while maintaining clear visibility into remaining hardening work.
|
2025-10-19 16:33:03 +00:00 |
|