Run the router as its own account, ask unlinking of the linked account, and take no approval where an agent can become root (hq ADR 0259 §7, §8)

2026-10-09 10:16:17 +02:00
parent 0cb000f358
commit ac9de9b9cd
20 changed files with 937 additions and 111 deletions
@@ -7,6 +7,7 @@
  "tools": [
    "sudo_rules",
    "sudo_check",
+    "sudo_escalation",
    "sudo_drop_ins"
  ],
  "resources": [