fix: prove Linux Agent sandbox boundary

2026-07-10 17:59:56 +08:00
parent f4968d6657
commit f07f280b8f
19 changed files with 381 additions and 55 deletions
@@ -6,6 +6,7 @@ Wants=network-online.target
 # after installation. Deployment preflight validates the executable itself;
 # this start-time assertion keeps later package/host changes fail-closed.
 AssertPathExists=__BWRAP_BIN__
+AssertPathExists=__SOCAT_BIN__

 [Service]
 Type=simple