From 24ecc2a7693d71bf18f71a3bf13cde6de8e2768f Mon Sep 17 00:00:00 2001 From: Ben Barclay Date: Fri, 28 Aug 2026 17:03:22 +1000 Subject: [PATCH] docs(telemetry): update cli-config.yaml.example for the stable-id decision PR review (andrexibiza, post-a69a9c351d) caught the one operator-facing surface the identity change missed: the example config still promised the profile-scoped ID is NOT sent and described the 30-day rotating HMAC. Rewritten to state the stable install_id is transmitted as-is, matching the sender, wizard, and docs A.2. Swept the repo for further stale references: none remain (the HMAC text in relay-shared-metrics.md A.2/A.3 is the intentional decision record). --- cli-config.yaml.example | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/cli-config.yaml.example b/cli-config.yaml.example index 2fe2c5e610..0675156986 100644 --- a/cli-config.yaml.example +++ b/cli-config.yaml.example @@ -1794,11 +1794,11 @@ display: # When sending is on: # * only packages whose period starts on or after the day you opted in are # ever transmitted, so data collected beforehand stays on this machine; -# * the profile-scoped ID is NOT sent. Each package carries an HMAC of it, -# keyed by a local-only salt that rotates every 30 days, so installs stay -# countable without shipping a durable identifier. +# * each package carries the profile-scoped ID as-is. It is a random UUID +# with no hardware, account, or host-derived content, and deleting the +# shared-metrics directory resets it. # See docs/observability/relay-shared-metrics.md (Appendix A) for the full -# consent, identity, rotation, retention, and deletion decisions. +# consent, identity, retention, and deletion decisions. telemetry: shared_metrics: enabled: false