Status: SUPPORTED as a map of product-enforced vs operator-recommended vs not certifiedAudience: evaluator, operator
Product-enforced #
- Hosting
enforcement: false / audit_only / log_only when hosting enabled
- Hosting Agent empty capability set; loader reduced caps
- Manager empty
CapabilityBoundingSet on the Enterprise unit
- Hosting cannot receive rules or restart via API (409)
- Community 3-Agent cap
- License gates on Enterprise writes (403 +
license object)
- AI
require_human_approval forced true when AI enabled; redaction forced; recommendation_only
- Cookie Secure policy on Enterprise login (HTTPS)
- Release admission verifies signed bundles
- Login/register rate limiters
- Agent register IP must match effective source (Enterprise)
- Critical-IP protection on manual BlockIP
- Hosting events API is category-safe (no raw payload)
Operator recommendation (not a certified hardened standard) #
agents.auto_register: false- TLS with a real certificate
- systemd credentials rather than YAML secrets
trusted_client_ip off unless loopback proxy with /32 and max_hops: 1- Do not enable UID/GID filtering as a customer contract
- Do not scrape
/metrics without admin JWT
- Do not enable Cloudflare
sync_on_block without a whitelist
Not certified / not public product #
- Cluster HA
- In-product updater
- ACME matrix
- Secret custody final acceptance
- Backup/restore contract
- Exactly-once event delivery
- Edge mode
- Internal AI development endpoints
- Published PPS, latency, scale, SLA
- SOC2 / ISO / HIPAA marks
