- classifyAndGate: escalate read-only commands on lxc: targets that touch /opt/, /etc/, /var/lib/ to config_mutation. The classifier scores command text only, not the SSH transport layer — SSH-ing into a container to read config is riskier than pct exec from the host. - ontology: standalone-server monitoring override from inherited [ping, resource, updates] to [http]. VPS-like machines may not be SSH/ICMP-reachable from the scheduler; HTTP is the LCD liveness signal. Entities with full SSH can override per-entity.
34 KiB
34 KiB