Security

  • Ed25519 identity + TrustStore admission / revocation
  • rustls mTLS (Fabric CA, WebPkiClientVerifier, TrustStore post-check)
  • CIDR allowlist + default-deny policy
  • Route advertisement security + quarantine forensics

Threat model · Security review · Internal assessment