provider-agent PoC

This page is served by an nginx container running on an untrusted provider node (t14thinkpad), launched by a provider-agent that holds zero Kubernetes credentials.

Path: internet → VPS HAProxy → Traefik (trusted edge) → reverse SSH tunnel → provider container.

job_id=poc-web-001 · spec issued 1786170172