Farrier: Fleet Management Without a Remote Shell

Why it surfaced

Farrier makes its security boundary the product: even a fully compromised control plane is not supposed to reach an arbitrary shell or override a host’s local policy. It is candid about being in phase 0, with four read-only operations implemented and destructive actions deliberately refused for now.

An Ubuntu and Debian fleet manager whose agents use outbound-only communication and a closed catalogue of typed operations instead of remote command execution.