open/portfolio-optimiser
1
0
Fork 0
Code Issues Releases 1 Activity

fix(s52): reject scheme-less webhook URL fail-fast in NotifierConfig

Browse source
This commit is contained in:
Kjell Tore Guttormsen 2026-07-17 03:14:36 +02:00
commit 8c252c1064
3 changed files with 25 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/extending.md
View file

@ -125,7 +125,8 @@ territory for a deployer, with the seam named:
point and is fail-closed behind an explicit per-run `allow_egress=True` opt-in (a code kwarg,
never a config field — mirroring the ingest layer's `allow_network`). SSRF guards, HMAC
signing, and auth headers remain deployer-owned extension points on the injectable
`WebhookPost` transport seam.
`WebhookPost` transport seam. Webhook URLs must start with `http://` or `https://` — a
scheme-less URL is rejected fail-fast at config construction.
- **U12 — checkpointing / crash-survival of a run.** A run either completes or is re-run; the
async verdict inbox (step 7) is the resumable boundary, not intra-run state.
- **U14 — OpenTelemetry / observability.** Provenance stamping is the audit trail the core