From f31bed2dc30b7e983ad366cea77eb078cd203ea0 Mon Sep 17 00:00:00 2001
From: Jon Chery <jchery@jccapital.xyz>
Date: Wed, 3 Jun 2026 21:37:13 +0000
Subject: [PATCH] ship(P08): mTLS merged into v0.2 milestone

- Fast-forward merge of phase/08-mtls into milestone/v0.2-networking-observability-security
- Annotated tag v0.2.1 created at this commit
- Gitea release v0.2.1 published with orca-v0.2.1-linux-amd64.tar.gz
- P01 ships internal-CA mTLS, orca cert {ca-init,gen,show,renew,fingerprint},
  orca doctor, orca node join --ca-fingerprint, file mode enforcement
  (0600/0644), rotation alarm at 30d, cert show redaction, AEAD-only
  TLS 1.3 cipher allowlist, structured mTLS handshake log fields.
- REQ coverage: REQ-011, REQ-023, REQ-025, REQ-026, REQ-032,
  REQ-033, REQ-034, REQ-035, REQ-036, REQ-038.

---ci---
project: orca
phase: 8
milestone: v0.2
plan: 01
status: ship
version: v0.2.1
requirements:
  covered: [REQ-011, REQ-023, REQ-025, REQ-026, REQ-032, REQ-033, REQ-034, REQ-035, REQ-036, REQ-038]
  partial: []
---/ci---