5c6a6924c1
Definitive root-cause for the bf-4iewr split's first child. Confirms against current source (with file:line citations) that: - The token validator is wired UNCONDITIONALLY (main.go:4494) - It reads hello.Token only (server.go:513); the sim never populates it - The sim sends its token only as the X-Spaxel-Token header (cmd/sim main.go:633/scenario.go:318), and the mothership never reads that header (HandleNodeWS upgrades unconditionally at server.go:469) -> the token-supply path is currently DEAD - The default 24h migration window (config.go:139) is the only thing accepting sim nodes -> current 'no reject' is a window MASK, not a fix - REJECT fires only when the window closes (SPAXEL_MIGRATION_WINDOW_HOURS=0 or uptime > 24h) Corroborated by the e2e harness comment (tests/e2e/e2e_test.go:86-94) which pins the window open and documents exactly this. Co-Authored-By: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| .gitkeep | ||
| ci-test-sim-reference-map.md | ||
| firmware-host-test-approach.md | ||
| mdns-override.md | ||
| recovery-mechanisms.md | ||
| simulation-testing.md | ||
| token-reject-root-cause.md | ||
| ux-visualization.md | ||