oscerd opened a new pull request, #23229: URL: https://github.com/apache/camel/pull/23229
## Summary - Clarify the existing "management surface" out-of-scope bullet in `docs/user-manual/modules/ROOT/pages/security-model.adoc` so that future readers can identify which side of the trust boundary the JMX / Jolokia management API sits on without deriving it from the trust-model section. - Names the MBean operations the bullet covers (`ManagedCamelContext.sendBody` / `requestBody`, `ManagedBacklogDebugger.evaluateExpressionAtBreakpoint`, `addConditionalBreakpoint`, `BacklogTracer.setTraceFilter`) and notes that they are intentionally as expressive as a route author's DSL so that operator workflows (Camel JBang, Hawtio, JConsole, monitoring agents) keep working. - Restates that the trust boundary is the JMX / Jolokia / management HTTP surface itself — JVM JMX authentication (`-Dcom.sun.management.jmxremote.authenticate`), the Jolokia restrictor policy, and the network exposure of the management port — not the individual MBean method. No code, no API, no behaviour change. Documentation only. ## Test plan - [ ] Render the Antora page locally and confirm the new paragraph appears inside the existing bullet without breaking the surrounding list structure. - [ ] Verify there are no broken `xref:` or other AsciiDoc cross-references introduced by the change. _Claude Code (Opus 4.7) on behalf of Andrea Cosentino_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
