[Darkroom4364]

Closes #101

Summary

• make server TLS, paths, redirect, origin, and listener settings authoritative with strict startup/API validation
• make payload and agent defaults, numeric bounds, OPSEC thresholds, identity, and supported build targets fail fast and consistent across Go, Rust, shell, and UI
• remove retired configuration and unsupported UI/docs surfaces, and document the supported runtime/build contract

Validation

• Go: full test suite, vet, and server build
• Rust: 81 tests, fmt, clippy, and mutation determinism
• Web: 13 Node tests and syntax checks
• Shell syntax, diff hygiene, and changed-file secret scan

Integration boundary

This PR targets dev only. Promotion from dev to main is explicitly out of scope.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 2a1e6065-2076-4421-b79c-8314669772af

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/101-authoritative-config

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}