Polish TTP protocol alignment - #43
Conversation
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 1ca598fa53
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| import { loadReceipts, saveReceipts, storeMetadata } from './storage.mjs'; | ||
| import { signHash, signingMetadata } from './signing.mjs'; | ||
|
|
||
| const HOST = process.env.HOST || '127.0.0.1'; |
There was a problem hiding this comment.
Preserve a routable default bind address
When this reference gate is run in the documented pre-prod/production pattern behind a load balancer (docs/deployment-guide.md Stage 3), defaulting HOST to 127.0.0.1 makes the process listen only on the container/pod loopback interface, so other containers or the LB cannot reach /healthz or /re/authorize unless operators discover and set an undocumented HOST=0.0.0.0. The previous server.listen(PORT) behavior accepted external interfaces, so this is a deployment regression for anyone following the existing guide.
Useful? React with 👍 / 👎.
No description provided.