Настройки и политики

Какво обхваща

• Settings са по domains: access/capabilities, maintenance windows, module lifecycle/visibility, worker thresholds, source/signature, firewall/network, remote allowlist/enrollment, hardware schedule/evidence retention, diagnostics/validation и audit retention.
• Runtime-changing settings следват Read → Plan → Apply и записват actor, reason, old/new value и audit.
• Maintenance policy може да warn/block restart/update/repair outside window.
• Hardware worker settings определят frequency, evidence channels, timeout, load restrictions и vendor lookup.

Как се работи

1. Read current value.
2. Create plan.
3. Check scope/impact.
4. Apply.
5. Verify runtime/audit.

Важни правила

• Не increase-вайте timeouts/allowlists само за warning.
• Safe defaults се change-ват с причина.
• Heavy evidence checks се schedule-ват според host load.