security: constrain dogfood delivery execution (#1487)

This commit is contained in:
2026-08-30 16:51:28 -05:00
parent 8356e72c1c
commit f194ccb8a3
13 changed files with 672 additions and 52 deletions
+4 -2
View File
@@ -8,7 +8,9 @@ GATEWAY_HOST_PORT=14242
# GATEWAY_IMAGE=git.mosaicstack.dev/mosaicstack/stack/gateway:sha-acf640d
# Optional explicit dogfood overlay (docker-compose.dogfood.yml).
# Both paths are required when that overlay is used. Use a dedicated next-based
# worktree and the external home of the unprivileged stack-dogfood seat.
# All three paths are required when that overlay is used. Use a dedicated
# next-based worktree, its canonical clone's .git directory, and the external
# home of the unprivileged stack-dogfood seat.
# MOSAIC_DOGFOOD_WORKTREE=/home/example/src/mosaic-stack-worktrees/dogfood-1487
# MOSAIC_DOGFOOD_COMMON_GIT_DIR=/home/example/src/mosaic-stack/.git
# MOSAIC_DOGFOOD_SEAT_HOME=/home/example/.mosaic/fleet/agents/stack-dogfood