Note: this is an in-house item already being handled by the maintainer - not open for contribution. Filed for tracking only.
Summary
Pull the telemetry feature's public documentation from the website while its security posture (unauthenticated public ingest endpoint, account-specific *.workers.dev hostname) is reconsidered.
Changes
- Mark
website/docs/telemetry.md as draft: true - fully excluded from the built site.
- Remove it from the sidebar.
- Remove the now-dead cross-links from
README.md, how-it-works.md, and cli-reference.md (the stats/telemetry command sections are removed from cli-reference.md entirely).
security-assurance-case.md keeps its factual disclosure that the opt-in endpoint exists (still true - the code and deployed Worker are unaffected by this), but drops the personal *.workers.dev hostname from the trust-boundary diagram.
Not affected
The CLI code, the cve-lite stats/telemetry/config commands, and the deployed Cloudflare Worker are all untouched - this is a documentation-visibility change only, fully reversible.
Summary
Pull the telemetry feature's public documentation from the website while its security posture (unauthenticated public ingest endpoint, account-specific
*.workers.devhostname) is reconsidered.Changes
website/docs/telemetry.mdasdraft: true- fully excluded from the built site.README.md,how-it-works.md, andcli-reference.md(thestats/telemetrycommand sections are removed fromcli-reference.mdentirely).security-assurance-case.mdkeeps its factual disclosure that the opt-in endpoint exists (still true - the code and deployed Worker are unaffected by this), but drops the personal*.workers.devhostname from the trust-boundary diagram.Not affected
The CLI code, the
cve-lite stats/telemetry/configcommands, and the deployed Cloudflare Worker are all untouched - this is a documentation-visibility change only, fully reversible.