Status: OUT
Node configuration changes are both delivered and validated end-to-end through the immutable pipeline, with API-level validation catching invalid values before they reach nodes.
depth-3 gated — the immutable delivery pipeline is robust but kubelet config values pass through without API validation, creating a gap where invalid config reaches nodes unchecked
Depends on (SL): node-config-immutable-delivery-pipeline
Unless: kubeletconfig-no-api-validation