Hot Reload

AI Cost Firewall supports hot reload with SIGHUP.

Binary / systemd

kill -HUP $(pgrep ai-firewall)

Docker Compose

docker compose kill -s HUP firewall

Behavior

On reload, the firewall reloads config, validates it, rebuilds runtime dependencies, and atomically swaps runtime state.

Expected logs:

received SIGHUP, reloading config
config and runtime successfully reloaded