rcourtman
|
d729461cad
|
Harden provider MSP tenant isolation
- isolate provider MSP tenant runtimes onto per-client Docker networks
- add adversarial proofs for workspace cap races, handoff retargeting, and org-bound agent report retargeting
- pin provider deploy proof to start Traefik before tenant network creation
|
2026-06-02 17:34:10 +01:00 |
|
rcourtman
|
3f20c85e86
|
Add provider MSP proof command
Adds a provider-hosted MSP proof command that exercises provider bootstrap, workspace creation, hosted tenant install-token generation, handoff exchange, setup-facts visibility, and cross-tenant token isolation.
|
2026-06-02 12:45:48 +01:00 |
|