Point at 0006 and 0008 rather than a record of their own
The language and the bundle ordering went into ADR 0006, where the substrate and the control plane already live, and the store-per-context mechanics into 0008, which already decided the rule. Nothing changed but where the reasoning is kept.
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
||||
# The control plane's image.
|
||||
#
|
||||
# novox/hq ADR 0024: this image is pinned by digest in the bundle the host carries, fetched on a
|
||||
# novox/hq ADR 0006: this image is pinned by digest in the bundle the host carries, fetched on a
|
||||
# machine where no mesh exists yet, and run before there is anything to check it against. So it
|
||||
# holds the program and nothing else — no shell, no package manager, no libc, nothing with a CVE
|
||||
# feed of its own. What a person has to audit before trusting a first node is one binary.
|
||||
|
||||
Reference in New Issue
Block a user