sjat a178729587 docs(spec): mesh-hardening redesign — askari wt0-primary + WAN break-glass ... Redesign of the backed-out 2026-06-17 askari SSH->wt0 attempt. Mirrors the proven ubongo 2/3 pattern (INPUT-only default-deny, SSH scoped by iifname wt0, no sshd ListenAddress change -> no boot-race) and adds the coordinator-host exception the incident demanded: a permanent non-mesh break-glass (WAN :22 from ubongo's static WAN IP + the Hetzner console), WAN :22 deliberately left open. Folds in the netbird_coordinator geo-DB robustness fix (FRICTION #4) so a transient egress blip can't FATAL the control plane. Harness-GREEN gate before a supervised live cutover. Operator decision (2026-06-19): do this redesign first, then a separate sub-project to reduce askari's SPOF role. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-19 16:25:26 +02:00
..
plans	docs(plan): mesh-hardening 2/3 — ubongo implementation plan	2026-06-19 09:26:04 +02:00
specs	docs(spec): mesh-hardening redesign — askari wt0-primary + WAN break-glass	2026-06-19 16:25:26 +02:00