# WORKING.md — Active Session Tracker

Agent work only. The human decides when it's done.
A commit is blocked while any task below remains unchecked.

## Current Tasks

- [x] Wire guest-agent-as-access ban: strip vm-guest from remote.sh, add check-rules.sh rule #11, codify in AGENTS.md [#403]
- [x] Convert vm-validation.sh + perf-matrix.sh + deploy-tuned-guests.sh from guest-agent to SSH
- [x] Rewrite bootstrap-all.sh for remaining 8 locked-out systems (user runs interactively)
- [x] Ban harness question-tool in meta + project AGENTS.md (use questions-v1.md only)