Brainstorming spec for ADR-021: operational access as a deployment deliverable. Two layers (host baseline + per-service), a three-tier access ladder (mesh SSH -> LAN SSH from ubongo -> console break-glass), declarative access__* data rendering ACCESS.md and driving a /check-access verifier. Resolves TODO 3.2 (API access) and 7.2 (host access); amends ADR-016 (SSH also from ubongo) and ADR-020 (ssh-from-control source). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| 2026-06-01-hardware-capacity-design.md | ||
| 2026-06-05-logging-log-integrity-design.md | ||
| 2026-06-05-mesh-vpn-netbird-design.md | ||
| 2026-06-05-service-ui-verification-design.md | ||
| 2026-06-05-ubongo-control-host-design.md | ||
| 2026-06-06-firewall-strategy-design.md | ||
| 2026-06-06-host-nftables-firewall-design.md | ||
| 2026-06-06-tagging-strategy-design.md | ||
| 2026-06-09-operational-access-design.md | ||