The Control Plane does not expose a universal root shell. The Agent accepts typed jobs and validates paths and values; secrets can be encrypted in the browser for a specific Agent. Managed configuration changes are validated and rolled back on failure.
1
Typed jobs
No public generic root shell API.
2
mTLS
Agent lease/completion is bound to verified identity.
3
Sealed secrets
Sensitive values can be encrypted in the browser for a specific Agent.
4
Rollback
Managed config restores previous content and file mode after a failed apply.
5
RBAC + audit
Privileged actions pass centralized authorization and are audited.
6
Scoped paths
Agent adapters constrain writable paths and canonical OCI targets.