[5.4] Least-privilege service design for web console and agents #4
Description
Implement privilege separation for web console/API/agents, unprivileged-by-default services with narrowly-scoped privileged brokers, per-action auth/authz/auditing, RBAC mapped to OS primitives, secure IPC, and systemd sandboxing.
Scope
This epic covers 12 decisions and 8 tasks from the Cortex Linux planning system.
Source
- Planning Tool: Skilliks
- Module: See internal planning documentation
Tasks
Tasks will be added as sub-issues or checklist items as specification is refined.
Epic generated from Cortex Linux strategic planning