ITWorx Pulse release export
bd774932d5
Public source validation / validate (push) Failing after 3m8s
20 lines
756 B
Markdown
20 lines
756 B
Markdown
# ADR 0001 — Pulse v1 is operationally read-only
|
|
|
|
**Status:** Accepted baseline
|
|
|
|
## Decision
|
|
|
|
Pulse may observe, query, configure its own monitoring behavior and create user records such as acknowledgements. It may not mutate Unraid, Docker, storage, containers, host processes or network configuration.
|
|
|
|
## Rationale
|
|
|
|
Monitoring and management have different security and failure domains. A compromised dashboard must not become a host control plane. Remediation belongs in a separately controlled AppOps workflow.
|
|
|
|
## Consequences
|
|
|
|
- No start/stop/restart/delete APIs.
|
|
- No process kill.
|
|
- No array/pool operations.
|
|
- Optional links may open an external management workflow.
|
|
- Tests enforce absence of mutation routes and dangerous agent capabilities.
|