weft-microvm-agent

Overview ¶

weft-microvm-agent runs inside an openweft micro-VM. It serves the read-only Introspect gRPC API (process table, …) to an operator CLI over the kernel WireGuard overlay (wg0), and — when pointed at the event bus — subscribes to mesh updates and re-applies its wg0 peer set whenever weft publishes a new desired state.

The gRPC server uses insecure credentials: transport confidentiality is provided by wg0, like the rest of the platform's overlay-secured listeners.