hosts/docs/adr/0001-privileged-mode-gates-writes.md
phg 7872991e0b Refactor test cases for improved readability and consistency
- Updated test_dns.py to enhance mock function definitions and improve spacing for better readability.
- Modified test_filters.py to streamline assertions and ensure consistent formatting across test cases.
- Cleaned up test_import_export.py by organizing imports and ensuring consistent formatting in CSV and JSON tests.
- Improved test_main.py by refining mock setups and ensuring consistent error handling in assertions.
2026-09-03 12:47:11 +02:00

424 B

Privileged mode gates system-file writes

The application starts read-only and permits changes to /etc/hosts only after sudo access has been validated and a timestamped backup has been created. All privileged writes go through HostsManager during that mode. This makes the authorization boundary visible to the user and guarantees a pre-edit safety snapshot; the temporary backup is not a user-facing recovery system.