The previous commit moved the nftables lockdown out of Task 5 and explained why in its message. A commit message is not where the next person looks. Task 5 now carries it: the bridge is normally already there because the ISO installer writes it, the lockdown belongs in Task 9 because SecureHostFirewall ran last for a reason, and "check from outside" cannot mean what it says before the tunnel exists — so the script checks inside-out and says so. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| 2026-07-25-customer-pipeline.md | ||
| 2026-07-25-host-onboarding.md | ||
| 2026-07-27-mailboxes.md | ||
| 2026-07-28-operator-identity.md | ||
| 2026-07-30-betriebsmodus-und-betriebsbereitschaft.md | ||
| 2026-07-30-host-uebernahme-bootstrap-skript.md | ||
| 2026-07-30-host-uebernahme-plattform.md | ||
| 2026-07-30-stripe-price-adoption.md | ||