From 2e0e0c1d89481ee397fbfd81ddda4517cc71de81 Mon Sep 17 00:00:00 2001
From: jester <admin@zerolaghub.com>
Date: Sun, 18 Jan 2026 22:50:25 +0000
Subject: [PATCH] Add Console Anti-Drift Rule - enforce PTY-backed,
 agent-owned, WebSocket architecture, disallow log-tailing or exec-based
 alternatives

---
 ANTI_DRIFT.md | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/ANTI_DRIFT.md b/ANTI_DRIFT.md
index b211944..849262c 100644
--- a/ANTI_DRIFT.md
+++ b/ANTI_DRIFT.md
@@ -56,3 +56,20 @@ The following are explicitly disallowed:
 
 All auth must flow:
 Portal → JWT → APIv2
+
+## Console Anti-Drift Rule
+
+The interactive console **MUST** remain:
+
+- PTY-backed
+- Agent-owned
+- WebSocket-based
+- Full duplex (input + output)
+
+🚫 Disallowed:
+- Log tailing as "console"
+- Exec-per-command models
+- Frontend-owned processes
+- Proxmox console passthrough
+
+Any deviation requires explicit architectural review.