Expand description
Operator-assigned trust for workload-host targets (ADR-099 section 3).
The operator’s peer list is authoritative on every sync: a listed peer
gets the listed tier (raised or lowered), and a known remote target
that is no longer listed is demoted to discovered, which governance
never places on. Demoted targets stay known so their placed instances
can still be stopped and unloaded. Addresses in keep (this node’s own
in-process host, Seeds) are not touched.
Trust is bound to a node key, not to an address. A listed peer with a
key gets its tier only for that key: a known target at the address
with another key is demoted, and the pinned key is learned by a
describe that refuses any other signer. A listed peer without a key
gives its tier to the key first seen at the address; a different key
answering there later is never learned under it (refresh requires
the stored key).
Structs§
- Operator
Peer - One operator-listed
workload-host.