jochen c30b79dd2a Name the account agents run as on a node, and say whether it can become root ...

On the control node every agent ran as the operator's account, which has
passwordless sudo, so an agent could become root without a person (hq ADR
0266). A node now names an agent account at the controller's terminal only;
the agent's module declares it never to become root, the node-engine judges
that, and the self-check (DA) raises agent-can-become-root while it does not
hold, so ADR 0259's router can rest on it.

2026-10-08 21:46:10 +02:00

..

internal/declaration

Name the account agents run as on a node, and say whether it can become root

2026-10-08 21:46:10 +02:00

validate

Vendor every dependency, so no build fetches the host's validator (hq to-be 45 D1)

2026-10-06 10:29:10 +02:00