Archived
The check read "declares no resources" as "runs nowhere", and those are not the same. The private network declares no resources either — the control plane computes them when it composes a machine's declaration — and it is assigned to every machine that has to reach another one. Refusing it stopped a four-machine bed at its first assignment. The signal is narrower: it builds an artifact and places nothing. Made a function of its own, because a judgement with a wrong answer this expensive should be testable without a database — nothing guarded it, which is how it shipped.