# WORKING.md — Active Session Tracker

Agent work only. The human decides when it's done.
A commit is blocked while any task below remains unchecked.

## Current Tasks

(all done — session complete)

- [x] Add ticket-closing policy: never close without user permission (AGENTS.md + meta template)
- [x] Reopen #407 (KNELCredsManager not complete)
- [x] Correct Vault understanding (deployed on Cloudron, not k8s)
- [x] Create #420 (VM DHCP reservations + LAN reverse DNS)