{
  "schema_version": 1,
  "hosts": [
    {
      "name": "debian1",
      "ssh_alias": "debian1",
      "state": "reachable",
      "machine_id": "66b9bc7fcc6c43d0b08ecff18fa633de",
      "roles": ["builder", "agent-seat", "e2e", "dangerlab", "agent-sandbox"],
      "access": {
        "lan": null,
        "tailscale_ip": { "host": "100.106.253.50", "port": 2222, "user": "user", "identity_file": "~/.ssh/id_ed25519_buildbox" },
        "tailscale_ssh": { "host": "debian1.taild2daa0.ts.net", "port": 22, "user": "user", "identity_file": null }
      },
      "rustdesk": "28888072",
      "notes": "playwright browser cache; kvm; github actions runner; tunnel endpoint. Hardened and reboot-proven 2026-08-07 on host-config change=9ad2943a996768e3; scratch disk sda1 ext4 mounted at /var/lib/buildbox. rustdesk peer id read from the box 2026-08-07. LAN door is null: this box sits behind a different router than the workstation, both defaulting to 192.168.1.0/24, so ARP never resolves from there and tailscale is the only path."
    },
    {
      "name": "debian2",
      "ssh_alias": "debian2",
      "state": "reachable",
      "machine_id": "368e8738e87948b1813d5714a9e024cb",
      "roles": ["builder", "agent-seat", "e2e", "agent-sandbox"],
      "access": {
        "lan": null,
        "tailscale_ip": { "host": "100.79.69.43", "port": 2222, "user": "user", "identity_file": "~/.ssh/id_ed25519_buildbox" },
        "tailscale_ssh": { "host": "debian2.taild2daa0.ts.net", "port": 22, "user": "user", "identity_file": null }
      },
      "rustdesk": "28907236",
      "notes": "Hardened and reboot-proven 2026-08-07 on host-config change=9ad2943a996768e3; scratch disk sda1 ext4 mounted at /var/lib/buildbox. Recovered 2026-08-07 over rustdesk after an earlier sshd bind change stranded it. LAN door is null: this box sits behind a different router than the workstation, both defaulting to 192.168.1.0/24, so ARP never resolves from there and tailscale is the only path."
    },
    {
      "name": "debian3",
      "ssh_alias": "debian3",
      "state": "reachable",
      "machine_id": "e9e4403979594b95a5f82b2fc7c12d28",
      "roles": ["builder", "agent-seat", "e2e", "agent-sandbox"],
      "access": {
        "lan": null,
        "tailscale_ip": { "host": "100.101.104.41", "port": 2222, "user": "user", "identity_file": "~/.ssh/id_ed25519_buildbox" },
        "tailscale_ssh": { "host": "debian3.taild2daa0.ts.net", "port": 22, "user": "user", "identity_file": null }
      },
      "rustdesk": "28886530",
      "notes": "Hardened and reboot-proven 2026-08-07 on host-config change=9ad2943a996768e3; scratch disk sda1 ext4 mounted at /var/lib/buildbox. LAN door is null: this box sits behind a different router than the workstation, both defaulting to 192.168.1.0/24, so ARP never resolves from there and tailscale is the only path."
    }
  ],
  "orders": {
    "build": ["debian1", "debian2", "debian3"],
    "e2e": ["debian1", "debian2", "debian3"]
  }
}