agent/docs/audits
Snider a50e3d8291 test(agentic): add HTTPS cert regression tests + fleet sync audit
Fleet registration in pkg/agentic already goes through the shared
&http.Client{Timeout: 30s} at transport.go:13 — no InsecureSkipVerify,
no custom TLS transport. This audit documents that finding and adds
regression coverage so future refactors can't silently strip TLS
validation from the /v1/fleet/register path.

Verdict: OK. No production bug. Tests pass trusted TLS server case
and reject untrusted cert with a wrapped error that surfaces the
certificate / x509 / tls signal in the message.

Closes tasks.lthn.sh/view.php?id=29

Co-authored-by: Codex <noreply@openai.com>
Co-Authored-By: Virgil <virgil@lethean.io>
2026-04-23 18:40:02 +01:00
..
fleet-https-cert-20260423.md test(agentic): add HTTPS cert regression tests + fleet sync audit 2026-04-23 18:40:02 +01:00
pipeline-verify-20260423.md docs(agent): verification audit of pipeline + plugin restructure + session lifecycle 2026-04-23 15:25:43 +01:00