Security

Zero trust gateway

All inbound connections on port 9099 are validated against the live peer address book. Any host not present in the book receives an immediate 403 Forbidden response.

Gossip validation

All incoming gossip payloads are size-limited and schema-validated before being merged into local state. Malformed or oversized payloads are discarded silently.

No encryption (yet)