Files
computer-playbook/scripts/system/apparmor
Environment TestandClaude Sonnet 4.6 5c1a963d30 docs(tools): restructure security and framework docs, add cleanup workflow
- Move flow/security/ghcr.md to tools/ghcr/authentication.md
- Move flow/security/mirror-cleanup.md to tools/ghcr/cleanup.md
- Move flow/security/branch.md to tools/github/branch.md
- Move flow/security/repository.md to tools/github/repository.md
- Move code/frameworks/ansible.md to tools/ansible.md
- Merge code/frameworks/Makefile.md into tools/make.md and extract file rules to artefact/files/makefile.md
- Rename tools/makefile.md to tools/make.md
- Add .github/workflows/images-mirror-cleanup.yml for manual GHCR cleanup
- Apply documentation.md standards: emojis on headlines, no em dashes, filename link text
- Fix all cross-references broken by directory restructuring

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-10 16:31:22 +02:00
..
…

AppArmor Administration 🛡️

This directory contains the AppArmor-facing maintenance layer for the local and CI development experience.

The focus here is not feature work, but control and safety: development workflows sometimes need a softer security posture, while cleanup paths must leave the system in a predictable state again. That makes this area less about convenience and more about trust, reversibility, and clear operational boundaries. 🔒

When changing anything in this area, prefer behavior that is:

  • explicit rather than magical
  • reversible rather than destructive
  • capability-aware rather than assumption-driven
  • quiet on unsupported systems, but loud when real integrity risks appear

In short: these files exist to help development move quickly without teaching the project to be careless around host security controls. ⚙️

For the canonical Make target index that invokes these helpers, see make.md.