rcourtman 630bf897be fix(agent): separate runner trust from collector TLS bypass ...

Legacy updates recover the collector's insecure setting even after the host
trusts the server certificate. Do not reject verified runner system trust
because of that unrelated setting. Keep HTTPS runner verification enabled
and preserve custom CA and exact fingerprint trust.

Exercise recovered configuration and the real credential lifecycle client
against TLS, including untrusted certificates and mismatched pins that must
receive no credential-bearing request.

2026-10-16 23:22:42 +01:00

..

internal

Use explicit governance qualification and evidence

2026-10-12 23:48:51 +01:00

v6

fix(agent): separate runner trust from collector TLS bypass

2026-10-16 23:22:42 +01:00

control_plane.json

Cut 6.5 and later releases from main

2026-10-04 18:37:43 +01:00

control_plane.schema.json

…