This commit is contained in:
@@ -0,0 +1,19 @@
|
||||
# ADR 0001 — Pulse v1 is operationally read-only
|
||||
|
||||
**Status:** Accepted baseline
|
||||
|
||||
## Decision
|
||||
|
||||
Pulse may observe, query, configure its own monitoring behavior and create user records such as acknowledgements. It may not mutate Unraid, Docker, storage, containers, host processes or network configuration.
|
||||
|
||||
## Rationale
|
||||
|
||||
Monitoring and management have different security and failure domains. A compromised dashboard must not become a host control plane. Remediation belongs in a separately controlled AppOps workflow.
|
||||
|
||||
## Consequences
|
||||
|
||||
- No start/stop/restart/delete APIs.
|
||||
- No process kill.
|
||||
- No array/pool operations.
|
||||
- Optional links may open an external management workflow.
|
||||
- Tests enforce absence of mutation routes and dangerous agent capabilities.
|
||||
Reference in New Issue
Block a user