Bind demo cohost observation to the real Relay health route

Current operational source exposes healthz and takes the shared deployment lock. Pin that route and make the disposable service return 404 for unknown paths so native acceptance cannot manufacture a healthy cohost observation.

Change-source: pulse-maintainer
This commit is contained in:
pulse-triage[bot]
2026-10-03 01:44:42 +01:00
parent 4df3e8974e
commit 360721cc91
4 changed files with 13 additions and 4 deletions
@@ -24,6 +24,9 @@ The mutating paths now share the Relay host's existing
Every successful path, including a healthy no-op, needs a complete 300-second
local/public/Relay health, version, service PID/restart and new-journal-crash
window. Readiness is separate. Missing observations fail closed.
The fixed Relay observation is its existing `/healthz` endpoint, not a guessed
new route; disposable acceptance also rejects an unknown route rather than
responding healthy to every URL.
Before installation or runtime-profile mutation, stop only Pulse and durably
capture its executable, unit/drop-ins and entire persistent data estate. Refuse