tractor/ai
Gud Boi f27db92c62 Add explicit `verify_wg_peer()` inspection
Validate a declared tunnel key against one `pyroute2` snapshot
containing the iface's own key and configured peers.

Deats,
- share worker offload across all WireGuard key readers
- forward `WGTunnelSpec.iface` and `.netns` to the read
- reject malformed declarations before netlink I/O
- export the async helper and cover local, peer and absent keys
- replace multihost's `wg show` subprocess probe

Prompt-IO: ai/prompt-io/opencode/20260822T023226Z_59a8ecfd_prompt_io.md

(this patch was generated in some part by `opencode` using `gpt-5.6-sol` (`openai`))
2026-08-27 20:54:25 -04:00
..
conc-anal Restore high-fanout startup cancellation stress 2026-08-26 17:00:44 -04:00
prompt-io Add explicit `verify_wg_peer()` inspection 2026-08-27 20:54:25 -04:00
tooling-todos Add `logspec` leaf-mod Route B follow-up doc 2026-06-17 15:47:07 -04:00
tpt-backends Add explicit `verify_wg_peer()` inspection 2026-08-27 20:54:25 -04:00