Define projects as configuration entries (D8); note the agent host's recovery

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPQ14L3LikyefCMFBqEbKE
2026-10-02 18:53:38 +00:00
1 changed files with 2 additions and 3 deletions
@@ -699,9 +699,8 @@ execution:
 - **A real Docker daemon,** since projects build and run containers.
 - **Sealed:** egress only to package sources and Gitea's git endpoint, plus what
  its project entry (D8) declares its tests need (e.g. LiteLLM for the `nisse`
-  project itself), reviewed like any allowlist (X2). Ingress only SSH from the
+  project itself), reviewed like any allowlist (X2). Ingress only SSH from the agent host. No other
-  agent host. No other route into RFC1918, and none to the agent host or the
+  route into RFC1918, and none to the agent host or the tailnet; no Tailscale.
  tailnet; no Tailscale.
 - **Their own VLAN,** with test services on predictable ports, and test containers
  on an internal network with no route out.
 - **A headless browser** reaches only the internal test network, to exercise what