fix(gateway): harden the KV→data-plane boundary against bad replicated state - #1035

Merged

kvinwang merged 13 commits into

nextfrom

fix/gateway-kv-robustness

Aug 12, 2026

Commits on Aug 11, 2026

fix(gateway): validate replicated instance records before they reach the data plane
kvinwang
committed
a5982a8
fix(gateway): drop instances deleted on another node
kvinwang
committed
386209e
fix(gateway): fail closed on corrupt global KV records
kvinwang
committed
75bd4dd
fix(gateway): ignore future-dated handshake and last_seen observations
kvinwang
committed
254474a
fix(gateway): quarantine an unreadable KV data dir instead of refusing to start
kvinwang
committed
f17e862
fix(gateway): skip zt-domain configs whose key and value disagree
kvinwang
committed
6a25b18
fix(gateway): keep instances whose replicated record is unreadable
kvinwang
committed
bc0fdb3
fix(gateway): reject instance records dated into the future
kvinwang
committed
d168809
fix(gateway): let an operator replace a corrupt certbot config
kvinwang
committed
88369cc
fix(gateway): fail the boot on a storage fault instead of quarantining
kvinwang
committed
58ce20f
fix(gateway): report a stuck KV record once, not on every reload
kvinwang
committed
67f8509
refactor(gateway): keep one epoch-seconds helper
kvinwang
committed
98e1bef

Commits on Aug 12, 2026

fix(gateway): reject self-referential WireGuard peers
kvinwang
committed
76fa871