deploy-agent.sh (Ubuntu VMs) + deploy-rsyslog.sh (PVE hosts, TCP/514 via Tailscale). Landed: agents on netinfra-01/02, librenms, awx (7 total active on manager); rsyslog forwarding verified on all 7 PVE hosts (persistent 514 sessions on the manager). Deferred: k8s nodes (k8s-chat coordination), docker json-log caps (needs daemon restart window). Meat + verification: https://projects.knownelement.com/issues/335#note-4006