Pinned
Session certificates now cover the full enrollment flow
Agents enroll with a registration key and receive a short-lived Atria session certificate — no shared secrets on the wire, verified offline against a pinned CA key.
Development log
What's shipping, in order — pinned items stay at the top.
Agents enroll with a registration key and receive a short-lived Atria session certificate — no shared secrets on the wire, verified offline against a pinned CA key.
The proxy now pulls a signed revocation list on an interval and fails open on the last good copy rather than blocking traffic when Atria Cloud is unreachable.
Dropped the Redis dependency for policy storage — policies are a YAML file you own and version control, parsed at startup and on explicit reload.