20260914 强制 TOML 配置并完善 TA 刷新与 daemon

examples/config/validate-full.toml

@@ -0,0 +1,27 @@
+config-version = 1
+mode = "validate"
+out = "output/full"
+rrdp-state-dir = "state/full"
+rrdp-sync-mode = "auto"
+ccr-out = "output/full/result.ccr"
+publish-dir = "publish/full"
+# Common settings: these choices are explicit, not all built-in defaults.
+ta-refresh-policy = "allow-valid-cache"
+max-ca-depth = 64
+http-timeout-secs = 300
+http-root-cert = [] # optional: ["tls/internal-root.pem"]
+parallel-max-repo-sync-workers-global = 8
+parallel-phase2-object-workers = 8
+parallel-phase2-worker-queue-capacity = 256
+parallel-repo-worker-queue-capacity = 1024 # effective minimum
+log-level = "info"
+log-format = "text"
+log-progress-interval-secs = 10
+require-complete = true # built-in default is false
+run-timeout-secs = 1800 # built-in default is 0 (unlimited)
+
+[[anchors]]
+id = "ripe"
+tal = "input/ripe.tal"
+# ta = "input/ripe.cer" # uncomment for fixed mode
+# constraints = "input/ripe.constraints" # must exist when explicit