oqyude f2e70bb147 docs: reality443Forwarding = required invariant (R1.10) — prevent T10 recurrence ...

AGENTS.md + project-rules.md trap entries updated: reality443Forwarding
is NOT a 'lost-purpose' option, it is REQUIRED on VDS. The nginx stream
(modules/vds/nginx.nix) routes 443 → 127.0.0.1:15380 → container:443;
removing the option breaks Xray REALITY while SSH and the panel keep
working (which is exactly what the owner observed).

New invariant R1.10 in project-rules.md. T10 manifest entry stays
'pending' pending a proper decision record.

2026-10-10 18:02:55 +03:00

..

project-rules.md

docs: reality443Forwarding = required invariant (R1.10) — prevent T10 recurrence

2026-10-10 18:02:55 +03:00