Define projects as configuration entries (D8); note the agent host's recovery

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPQ14L3LikyefCMFBqEbKE
2026-10-02 18:53:45 +00:00
1 changed files with 3 additions and 2 deletions
@@ -699,8 +699,9 @@ execution:
 - **A real Docker daemon,** since projects build and run containers.
 - **Sealed:** egress only to package sources and Gitea's git endpoint, plus what
  its project entry (D8) declares its tests need (e.g. LiteLLM for the `nisse`
-  project itself), reviewed like any allowlist (X2). Ingress only SSH from the agent host. No other
+  project itself), reviewed like any allowlist (X2). Ingress only SSH from the
-  route into RFC1918, and none to the agent host or the tailnet; no Tailscale.
+  agent host. No other route into RFC1918, and none to the agent host or the
  tailnet; no Tailscale.
 - **Their own VLAN,** with test services on predictable ports, and test containers
  on an internal network with no route out.
 - **A headless browser** reaches only the internal test network, to exercise what