banger/docs
Thales Maciel b0b1300314
docs: add the privilege model document
Explain what runs as the owner user vs root, every helper RPC method
and its validation gate, the on-disk paths banger writes, network
mutations, and how install/uninstall work end to end. The aim is to
give a reader enough information to grant or refuse the privileges
banger asks for during system install with their eyes open.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-26 12:55:18 -03:00
..
reference Reorganize the source checkout layout 2026-03-21 17:22:57 -03:00
advanced.md daemon: split owner daemon from root helper 2026-04-26 12:43:17 -03:00
dns-routing.md daemon: split owner daemon from root helper 2026-04-26 12:43:17 -03:00
image-catalog.md docs: promote vm run + image catalog as the happy path 2026-04-18 15:33:30 -03:00
kernel-catalog.md docs: resync package docs, AGENTS, and kernel-catalog with current code 2026-04-22 13:01:11 -03:00
oci-import.md daemon: persist teardown fallbacks and reject unsafe import paths 2026-04-23 16:21:59 -03:00
privileges.md docs: add the privilege model document 2026-04-26 12:55:18 -03:00