---
name: agent-security-plan
description: "Agreed plan for sandboxing Claude Code, OpenCode and Hermes, hardening mainframe, and drilling restores; agreed 2026-11-06"
metadata:
  node_type: memory
  type: project
  originSessionId: 91ecb21b-604e-40e1-9420-908de11f9496
  modified: 2026-11-06T18:13:08.400Z
---

Plan is in `~/guides/mainframe/agent-security-plan.md`. Read it before changing sudo, the
`docker` group, Home Assistant privileges, `act_runner`, agent launchers, or web fetching.

**Why:** Connor ranks damage to mainframe and credential theft as his top concerns, and
has never exercised a restore.

**How to apply:** Check the machine rather than assuming a phase has landed. SSH passphrases
and Hermes write approvals were declined, so don't re-propose them. Rootless Podman is
deferred for reasons recorded in the plan.