# ADR 0001 — Pulse v1 is operationally read-only

**Status:** Accepted baseline

## Decision

Pulse may observe, query, configure its own monitoring behavior and create user records such as acknowledgements. It may not mutate Unraid, Docker, storage, containers, host processes or network configuration.

## Rationale

Monitoring and management have different security and failure domains. A compromised dashboard must not become a host control plane. Remediation belongs in a separately controlled AppOps workflow.

## Consequences

- No start/stop/restart/delete APIs.
- No process kill.
- No array/pool operations.
- Optional links may open an external management workflow.
- Tests enforce absence of mutation routes and dangerous agent capabilities.