Files

agentctl coordinator unit templates

Templates only. Not loaded on this machine.

  • agentctl-coordinator.service — systemd Type=simple foreground unit
  • com.agentctl.coordinator.plist — launchd KeepAlive foreground job

Loading requires explicit authorization plus a fail-closed verification record (owner, host, command evidence, rollback). Do not launchctl load / systemctl enable from a task worktree without that gate.

Daemon runs as the caller; it only drives already-validated integrate candidates via queue schedule under exclusive manager.lock. It does not touch env:* and does not grant new capabilities.