mirror of
https://github.com/Control-D-Inc/ctrld.git
synced 2026-10-24 14:08:27 +02:00
Dev Scribe
50caf516bd
On macOS in Intercept mode, an IPv6-only network that offers no DHCPv4 and no PREF64 ended in a DNS outage. The DHCP option-6 read fails there because no lease exists, and the native-CLAT evidence does not exist yet because macOS starts its CLAT only after RFC 7050 prefix discovery (ipv4only.arpa) succeeds. pf blocks IPv6 port 53 and the service has no IPv4 DNS, so that lookup can never be sent. ctrld waited for evidence that only DNS could produce. A failed DHCP read now admits the target with a second kind of positive native evidence: configd publishes no global or per-service IPv4 state, the IPv6 primary service is this device, and the interface holds only IPv6 addresses (at least one routable). The service mapping, unique enabled networksetup name, two-second shared budget, tuple recheck, validated snapshot backup and ownership rules are the same as on the CLAT path. Unknown or changing state still admits nothing. A readable DHCP lease never consults the new evidence, and CLAT evidence keeps precedence. The journal line records which evidence admitted the target.