forked from heavy-duty/box
The tenant half of rig#76 is what #123 tracked, but the machine half reaches box in one place: the tailnet workload join box prints as the next step for a staging-box guest is `rig bootstrap workload`, and that role is now `workload-server`. box never runs it -- it holds a pre-auth key, and that it stays operator-run is the absence that keeps box creds-free end to end -- but box does PRINT it, in three places that all had to move together: cmd_new's hint, the staging-box seed's own comment, and the README. A next step an operator copy-pastes is as wrong as a role box executes, and it fails later and further from the cause. The suite's assertion moved with it, so it still pins what it was written to pin: that the join is printed and never exec'd. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| blank | ||
| claude-box | ||
| codex-box | ||
| grok-box | ||
| staging-box | ||