Skip to content

docs(hardware): record the CRS326's management MAC as an OUI, like every other - #1186

Merged
Gerrrt merged 1 commit into
mainfrom
review/redact-switch-management-mac
Oct 14, 2026
Merged

Gerrrt merged 1 commit into
mainfrom
review/redact-switch-management-mac

Conversation

@Gerrrt

@Gerrrt Gerrrt commented Oct 14, 2026

Copy link
Copy Markdown
Owner

What changed

One line in docs/hardware.md: the CRS326's management MAC, read at the bench on 2026-10-05, is now 48:8f:5a:xx:xx:xx rather than its full six octets. Nothing else in the entry moves; the serial stays, because hardware.md is the inventory of record for serials and that is a separate decision from the one on MACs.

Why

Found during a repository review. docs/security.md § What this repository deliberately does not publish says full MACs are truncated to the OUI, and every other MAC in hardware.md and network.md is. This was the one exception. The only full MAC left in the tree is the LLDP multicast constant in the Suricata runbook, which identifies a protocol, not a device.

Blast radius

None. Documentation only.

  • No change to network segmentation or firewall rules
  • No new port published to a VLAN that could not already reach the service
  • No credential added outside secrets/*.sops.yaml

Verification

  • grep for a six-octet MAC across docs/ and README.md now finds nothing but the LLDP constant.
  • make validate could not be run in this environment (no Docker daemon); CI's markdownlint and check_docs.py cover it.
  • make validate passes (CI)
  • Deployed to the lab and confirmed working (not applicable: docs only)
  • Docs updated

🤖 Generated with Claude Code

https://claude.ai/code/session_013Dchg9vmfKeQd7uzRzPcLR


Generated by Claude Code

…ery other

docs/security.md says full MACs are withheld and truncated to the OUI,
and every other MAC in hardware.md and network.md is. The CRS326's
bench reading on 2026-10-05 carried the full six octets. The serial
stays: hardware.md is the inventory of record for serials, and that is
a different decision from the one on MACs.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013Dchg9vmfKeQd7uzRzPcLR
Copilot AI balanced review requested due to automatic review settings October 14, 2026 05:11

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The documentation-only change consistently applies the established MAC-address policy.

0 open findings

What changed in this PR

Updates the CRS326 inventory entry to follow the repository’s MAC-address privacy policy.

Changes:

  • Replaces the full management MAC with its OUI.
  • Clarifies why the address is truncated.
File Description
docs/​hardware.md Truncates the CRS326 management MAC to its OUI.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@Gerrrt
Gerrrt merged commit e2c22ad into main Oct 14, 2026
9 checks passed
@Gerrrt
Gerrrt deleted the review/redact-switch-management-mac branch October 14, 2026 10:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants