jochen 8390fab5cb Judge whether an account declared never to become root can, so a machine's agents are known confined ...

An account an agent runs as (novox/hq ADR 0266) is read on every look for a
uid of 0, a group that grants root, any sudo rule and a mesh secret it can
read; any way found is unhealthy and said, a read that fails is unknown.

2026-10-08 18:30:10 +02:00

..

mesh-bootstrap

Take over the found tunnel: its key, its port, its peers; stop it, never flush

2026-09-23 23:26:35 +02:00

mesh-host

Judge whether an account declared never to become root can, so a machine's agents are known confined

2026-10-08 18:30:10 +02:00