diff --git a/skills/apsuflow/SKILL.md b/skills/apsuflow/SKILL.md index 4e2b4ff..5cf32cc 100644 --- a/skills/apsuflow/SKILL.md +++ b/skills/apsuflow/SKILL.md @@ -45,9 +45,10 @@ in the same change when applicable requirements or CLI behavior change. - The unprivileged service daemon owns OCI children inside its delegated cgroup v2 subtree. A supervisor may prepare root-owned host networking/firewall state, but the long-running daemon must not gain root merely to bypass a failed - profile. Stable host profiles target Debian glibc/systemd and Void Linux - musl/runit; advertise one only after its complete isolation and golden path - pass. Routine CLI use remains unprivileged and authenticated. + profile. Stable host support is defined by Linux capabilities rather than a + distribution, libc, or init brand; advertise a concrete profile only after its + complete isolation and golden path pass. Routine CLI use remains unprivileged + and authenticated. - `.apsu` contains desired workloads and infrastructure, never secret values or mutable runtime state. - Services are continuously reconciled. Jobs are finite run-to-completion work.