hosting isolation validation
time: 2026-02-09T11:54:28Z
passed (must): false
mustPassed: false
shouldPassed: true

OK [must] external_https_via_proxy (expected allowed) observed=allowed
FAIL [must] external_https_direct (expected blocked) observed=allowed
OK [must] orchestrator_api_direct (expected blocked) observed=blocked
OK [must] metadata_direct (expected blocked) observed=blocked
OK [must] private_10_0_0_1_direct (expected blocked) observed=blocked
OK [must] private_172_16_0_1_direct (expected blocked) observed=blocked
OK [must] private_192_168_0_1_direct (expected blocked) observed=blocked
OK [should] runtime_socket_docker_absent:docker.sock (expected absent) observed=absent
OK [should] runtime_socket_containerd_absent:containerd.sock (expected absent) observed=absent
OK [should] runtime_socket_k3s_containerd_absent:containerd.sock (expected absent) observed=absent
OK [should] service_account_token_absent:token (expected absent) observed=absent
OK [should] runs_as_non_root (expected enabled) observed=enabled
OK [should] seccomp_enabled (expected enabled) observed=enabled
OK [should] apparmor_confined (expected enabled) observed=enabled
OK [should] dangerous_caps_absent (expected absent) observed=absent