Require explicit canonical network readiness targets

This commit is contained in:
ms2k 2026-07-16 20:41:13 +09:00
commit fbd332c31f

View file

@ -17,5 +17,10 @@ volumes = [
{ host = "{profile_dir}/agent-state", container = "/root/.local/state/agent", kind = "directory", access = "read-write", create = true },
]
[profiles.default.readiness]
denied = [{ address = "10.20.30.40", port = 443 }]
permitted = [{ address = "203.0.113.10", port = 443 }]
dns = [{ resolver = "198.51.100.53", query = "example.invalid" }]
[profiles.default.escalation]
enabled = false