Implements the M5 endpoints of the contract (ADR 0023): clusters with
member validation, transfer keys and HA credentials, TSIG keys with
audited secret access and rotation, explicit zones and typed records,
the DHCP cluster of networks, the cluster of agents and the default
clusters and HA password file of the generator settings. Revisions are
stored per target with sealed secret files and sealed source secrets
(restored for rollbacks); bundles carry an agent's own target or the
default group. Active leases are adopted as dynamic addresses.
The derivation is called through a temporary adapter until derive
implements the M5 contract.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
sir_melonchenandClaude Opus 5.5
2b04661792