ITWorx-Pulse-Public/docs/architecture/adr/0001-read-only-v1.md

ADR 0001 — Pulse v1 is operationally read-only

Status: Accepted baseline

Decision

Pulse may observe, query, configure its own monitoring behavior and create user records such as acknowledgements. It may not mutate Unraid, Docker, storage, containers, host processes or network configuration.

Rationale

Monitoring and management have different security and failure domains. A compromised dashboard must not become a host control plane. Remediation belongs in a separately controlled AppOps workflow.

Consequences

• No start/stop/restart/delete APIs.
• No process kill.
• No array/pool operations.
• Optional links may open an external management workflow.
• Tests enforce absence of mutation routes and dangerous agent capabilities.