Redacted excerpt; full evidence withheld.

$ cd <guest-path> && pwd && ls -la && id -u && (git status 2>&1 | head -3) && cat README.md 2>/dev/null | head -200
exit: 0
t with an ASCII letter or digit (`A-Z`, `a-z`, `0-9`), and contain only ASCII letters, digits, spaces, periods (`.`), underscores (`_`), or hyphens (`-`). The last character may be any of these except a space; leading and trailing spaces are rejected. Labels are descriptive only and need not be unique.

Agent names come from the policy file. Define at least one agent with a unique name following the host-alias character and length rules above. The starter policy uses `agent-a`, `agent-b`, and `agent-c`; replace those examples with your own names only in the gitignored `policy.local.json`. Each tag must be exactly `tag:agent-NAME`, with `NAME` replaced by that agent's name. Each agent's `never` list must contain exactly these six strings, once each, in any order: `unlisted_lan_hosts`, `other_agents`, `internet_or_exit_nodes`, `tailnet_administration`, `policy_or_device_changes`, and `all_unlisted_ports`.

Policy files must be UTF-8, at most 1,000,000 bytes (including whitespace), and at most 16 nested object/array levels, counting the root object as level 1. Br
[excerpt truncated]