müde 4a8204f035 lifecycle: bind /applied into manager read-only ... set_nspawn_flags now adds --bind-ro=/var/lib/hyperhive/applied :/applied for the manager container alongside the existing /agents RW mount. manager can git-fetch deployed/failed/denied tags out of /applied/<n>/.git to mirror them into its proposed clones; the read-only bind means git plumbing inside the container cannot corrupt the authoritative repos. picked up by the next rebuild of hm1nd (no spawn-time change needed since set_nspawn_flags runs on every spawn + rebuild).		2026-05-15 23:02:31 +02:00
..
assets	surface agent-vs-agent port collisions (manager:8000 can't collide)	2026-05-15 22:08:19 +02:00
src	lifecycle: bind /applied into manager read-only	2026-05-15 23:02:31 +02:00
Cargo.toml	Phase 7b: broker broadcast + dashboard SSE message-flow tail; pkgs.git in module	2026-05-15 00:13:34 +02:00