Skip to main content

WHOLE_CONFIG_SENTINEL

Constant WHOLE_CONFIG_SENTINEL 

Source
pub const WHOLE_CONFIG_SENTINEL: &str = "<entire-config>";
Expand description

Sentinel dropped_security entry used when the whole config is replaced by Config::default() (unparseable TOML, unsupported future schema, broken migration chain, or a root that cannot be salvaged section-by-section). In that case every security-critical section is lost at once, so the posture is degraded and the serving gate must refuse to start without an explicit operator override — exactly as it does for a single dropped section.