didericis b2927b1483 docs(prd): note gate image must be self-sufficient at boot on 0007 ...

The gate's agent-facing leg sits on the `--internal` network, so
the forwarder image cannot rely on apk/apt at startup. Surfaced
by the DNS spike — a placeholder using `apk add socat` died
silently and gave a false-negative DNS-on-internal result.

2026-05-12 15:50:34 -04:00

..

.gitkeep

Initial commit

2026-05-07 22:45:36 -04:00

0001-per-agent-egress-proxy-via-pipelock.md

docs: replace stale .sh paths with claude_bottle/*.py equivalents

2026-05-10 00:27:25 -04:00

0002-test-pipeline-on-gitea-actions.md

PRD 0002: Test pipeline on Gitea Actions (#3)

2026-05-09 02:48:03 -04:00

0003-bottle-backend-abstraction.md

docs(prd): update PRD 0003 to reflect the shipped design

2026-05-11 14:47:17 -04:00

0004-split-out-provisioners.md

docs(prd): add 0004 split out provisioners

2026-05-11 19:36:39 -04:00

0006-pipelock-tls-interception.md

docs(prd): fold 0006 walkthrough resolutions into the design

2026-05-12 14:22:59 -04:00

0007-ssh-egress-gate.md

docs(prd): note gate image must be self-sufficient at boot on 0007

2026-05-12 15:50:34 -04:00