docs(sp42): README.md — fix audit-log verify paragraph that referenced pre-SP23 127.0.0.1 bind

2026-07-08 23:23:31 -06:00
parent 0156051ca7
commit 55f9f8b8ba
1 changed files with 2 additions and 2 deletions
@@ -431,8 +431,8 @@ in a single walk.
 `verify_chain` is the integrity check that backs the audit promise —
 it is intentionally cheap (one indexed walk) and intentionally
 side-effect-free so a scheduler can run it on a cron and alert on any
-non-`{ok: true}` result. Chain verification is **not** access-gated
-beyond the same `127.0.0.1` bind the rest of the API uses; for a
+non-`{ok: true}` result. Chain verification is gated by the standard
+`matrix_gate` dependency (admin role for the `/verify` subpath); for a
 hostile multi-operator deployment, wrap the route in your reverse proxy.

 ## Encryption at Rest