DNS

DNS

Thin wrapper over standard resolver libraries for:

Pre-rollover validation (does the customer’s intended CNAME resolve correctly?)
Post-rollover health checks (dns_set_correctly flag on apps)
CAA record checks for cert renewal eligibility

No vendor API — uses DNS itself.

docs/dns-cname-and-a-records.md
docs/caa-records-and-certificate-renewal.md