docs(telemetry): update cli-config.yaml.example for the stable-id decision

PR review (andrexibiza, post-a69a9c351d) caught the one operator-facing
surface the identity change missed: the example config still promised
the profile-scoped ID is NOT sent and described the 30-day rotating
HMAC. Rewritten to state the stable install_id is transmitted as-is,
matching the sender, wizard, and docs A.2. Swept the repo for further
stale references: none remain (the HMAC text in relay-shared-metrics.md
A.2/A.3 is the intentional decision record).
This commit is contained in:
Ben Barclay
2026-08-28 17:03:22 +10:00
parent a69a9c351d
commit 24ecc2a769
+4 -4
View File
@@ -1794,11 +1794,11 @@ display:
# When sending is on:
# * only packages whose period starts on or after the day you opted in are
# ever transmitted, so data collected beforehand stays on this machine;
# * the profile-scoped ID is NOT sent. Each package carries an HMAC of it,
# keyed by a local-only salt that rotates every 30 days, so installs stay
# countable without shipping a durable identifier.
# * each package carries the profile-scoped ID as-is. It is a random UUID
# with no hardware, account, or host-derived content, and deleting the
# shared-metrics directory resets it.
# See docs/observability/relay-shared-metrics.md (Appendix A) for the full
# consent, identity, rotation, retention, and deletion decisions.
# consent, identity, retention, and deletion decisions.
telemetry:
shared_metrics:
enabled: false