From d130f1a5c3fa3be47dc4dc4a94d4164b5f787de9 Mon Sep 17 00:00:00 2001 From: Zoltan Papp Date: Tue, 9 Jun 2026 12:34:00 +0200 Subject: [PATCH] [client] Clarify posture check update logic with explicit comment --- client/internal/engine.go | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/client/internal/engine.go b/client/internal/engine.go index fa0516d4f..2121b14b5 100644 --- a/client/internal/engine.go +++ b/client/internal/engine.go @@ -914,10 +914,13 @@ func (e *Engine) handleSync(update *mgmProto.SyncResponse) error { // todo update signal } + // Posture checks are bound to the network map presence: + // NetworkMap != nil, checks present -> apply the received checks + // NetworkMap != nil, checks nil -> posture checks were removed, clear them + // NetworkMap == nil -> config-only update (e.g. relay token rotation), + // leave the previously applied checks untouched nm := update.GetNetworkMap() if nm == nil { - // config-only update (e.g. relay token rotation): posture checks and network map are intentionally absent, - // preserving the previously applied state return nil }