[PR] docs: re-cut secure-agent-setup ↔ internals as adopter-first vs how-it-works [airflow-steward]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk opened a new pull request, #22:
URL: https://github.com/apache/airflow-steward/pull/22

   ## Summary
   
   PR #21 split the secure-agent-setup doc into install-and-context (`secure-agent-setup.md`) plus a mechanism deep dive (`secure-agent-internals.md`). This re-cuts that split along a sharper audience line:
   
   - **`secure-agent-setup.md`** — adopter-only. Install steps + screenshots. No threat model, no three-layer-defence theory, no residual-risks discussion. Intro names the audience as adopters; design/rationale readers are pointed at the internals doc.
   - **`secure-agent-internals.md`** — design + how-it-works. Threat model, three-layer defence, the existing mechanism deep-dive, and residual risks. Intro names the audience as anyone modifying the setup or debugging an unexpected allow / deny.
   
   Internals title broadened from "How sandbox isolation works" to "Secure agent setup — how it works" since the file now covers context (threat model, defence shape) on top of the sandbox mechanism.
   
   ## Test plan
   
   - [ ] `prek run --files secure-agent-setup.md secure-agent-internals.md` clean.
   - [ ] All five image refs in setup.md still resolve from `images/`.
   - [ ] Cross-doc anchors render: internals → setup#adopter-setup, setup#sandbox-state-status-line, setup#sandbox-bypass-visibility-hook.
   - [ ] Setup doc's first H2 is `Required tools` (no theory preamble between intro and install).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] docs: re-cut secure-agent-setup ↔ internals as adopter-first vs how-it-works [airflow-steward]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk merged PR #22:
URL: https://github.com/apache/airflow-steward/pull/22


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org