spaxel/docs
jedarden 3c5b79b791 docs(bf-5ig3e): confirm validator wired unconditionally + hello.Token-only check
Verify the validator-side half of the tokenless-sim REJECT root cause
against current source (first link of the bf-34lwt split):

- mothership/cmd/mothership/main.go:4494 — SetTokenValidator(...) is a
  bare statement with no env/build guard; provSrv is created
  unconditionally at :4492. 'validator configured?' is always YES.
- mothership/internal/ingestion/server.go:513 — tokenOK :=
  hello.Token != "" && validator(hello.MAC, hello.Token) depends
  solely on the deserialized hello JSON body field (message.go:22),
  not any HTTP header. No X-Spaxel-Token read exists on this path.

Conclusion: validator always configured; accept/reject hinges entirely
on hello.Token.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-07-07 06:38:33 -04:00
..
notes docs(bf-5ig3e): confirm validator wired unconditionally + hello.Token-only check 2026-07-07 06:38:33 -04:00
plan docs(plan): fix API path for crowd flow endpoint 2026-07-06 00:09:54 -04:00
research init: spaxel project — docs, plan, and marathon infrastructure 2026-03-26 06:43:25 -04:00
ci-accessibility-integration.md docs(ci): add accessibility quality gate documentation 2026-07-06 00:32:03 -04:00
ci-benchmark-integration.md ci: retire GitHub Actions workflows (benchmark-ci.yml, e2e.yml) 2026-07-04 07:44:33 -04:00