Operating a host

Running the thing once it is up.

Operations	apply semantics, its flags, host-template propagation, doctor
RHEL packaging notes	the el10 dependency map and the kasmvnc/openbox rebuilds
Logging an agent in	the per-provider login flows and the optional auth broker
Custom model endpoints	pointing a claude or pi agent at a gateway or Azure AI Foundry
Cost cap	the per-agent daily spend cap and its three choke points
The fleet view	the admin role, the fleet mini-app, cross-host reads, linking hosts
Ports and the port guard	the host port map, the per-agent bands and the nftables enforcement