Notifications:
- Warn once when a counter reaches warn_percent of its limit, through
separate warn_*_url endpoints.
- Write ntf/ markers so a lost Redis reply cannot re-send a breach.
- Retry only when the request never left or the web app answered 429/5xx.
Fixes:
- Retry transactions Redis rejected; treat pool timeouts as definite.
- Install the signal handler before startup work.
- Stop logging the login suffix; redact notify URL credentials.
- Reject corrupt or empty CDBs, truncated hash tables included.
- Require a Sentinel password, refuse example placeholders, and default
admin_addr to localhost.
- Normalise /counters domains, count on the arrival day, log rejections,
hide internals in errors and exit 1 on a failed drain.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Dimitrije DimitrijevicandClaude Opus 5.5