Wise-Wren-Agent

The agent for Wise Wren: it runs on each server Wren keeps up to date. It connects out to your Wise Wren server (no ports are opened), reports what runs on this server, and carries out the updates and rollbacks someone approved in Wren, with a snapshot first and a health check after. ROOT-EQUIVALENT: this container gets the Docker socket, and access to the Docker socket is root access to the whole server. It also runs as root and mounts Unraid's /boot/config so it can update template containers the way Unraid does. Only install it if you trust your Wise Wren server and everyone who can sign in to it as editor or admin, and keep its token secret. What limits it: Wren can never send a command line, only ask for an approved update of a named target. The agent re-checks every job against Docker and its own agent.toml (in the Config folder): which folders it may touch (roots) and, with