oqyude f2e70bb147 docs: reality443Forwarding = required invariant (R1.10) — prevent T10 recurrence ...

AGENTS.md + project-rules.md trap entries updated: reality443Forwarding
is NOT a 'lost-purpose' option, it is REQUIRED on VDS. The nginx stream
(modules/vds/nginx.nix) routes 443 → 127.0.0.1:15380 → container:443;
removing the option breaks Xray REALITY while SSH and the panel keep
working (which is exactly what the owner observed).

New invariant R1.10 in project-rules.md. T10 manifest entry stays
'pending' pending a proper decision record.

2026-10-10 18:02:55 +03:00

..

context

metaagent: install v3.0.0, migrate docs/arch/* → .agent/

2026-10-09 20:37:14 +03:00

decisions

revert(vds-nftables): restore original config — T3 fix needs discussion

2026-10-10 17:30:58 +03:00

reviews

metaagent: Wave 1 + T4 + T7 + T3 + T5 + T15 + T16 — 12 tasks of tech-debt reduction

2026-10-10 15:15:22 +03:00

roadmap

metaagent: install v3.0.0, migrate docs/arch/* → .agent/

2026-10-09 20:37:14 +03:00

rules

docs: reality443Forwarding = required invariant (R1.10) — prevent T10 recurrence

2026-10-10 18:02:55 +03:00

src

metaagent: install v3.0.0, migrate docs/arch/* → .agent/

2026-10-09 20:37:14 +03:00

tasks

fix(3x-ui): restore reality443Forwarding — T10 removal broke Xray REALITY

2026-10-10 17:54:18 +03:00

checkpoints.json

metaagent: Wave 1 + T4 + T7 + T3 + T5 + T15 + T16 — 12 tasks of tech-debt reduction

2026-10-10 15:15:22 +03:00