CI / checks (push) Skipped
CI / checks (pull_request) Successful in 1m20s
Agents run as containers on one stable agent host that keeps their state and secrets and never runs a command a model chose. Model-chosen commands run on disposable tool VMs over SSH: a build VM per project for nisse-dev, its own tool VM for nisse-ops. Secrets are a set per agent, handed out per operation by the harness and redacted from tool output. MCP servers stay on the agent host as the one exception. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01PPQ14L3LikyefCMFBqEbKE