3 commits

Author	SHA1	Message	Date
sjat	c7194ca147	feat(integration): allow SSH from the NAT gateway in the askari overlay ... base's default-deny firewall would drop the driver's post-reboot SSH from the libvirt NAT gateway; set base__firewall_control_addr to the gateway (by source IP, interface-independent). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-18 16:35:15 +02:00
sjat	3769c9ebb9	feat(integration): outcome-based verify playbook (DNAT-survives-reboot) ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-18 12:38:22 +02:00
sjat	10121e72d3	feat(integration): askari profile, stub overlay, cert-tier files ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-18 12:37:32 +02:00