Harden host security and risk posture

Audit host security posture and harden firewall

Harden agent gateway hosts before exposing to untrusted networks without reinitializing the entire infrastructure.

• · host OS/version
• · privilege level
• · network exposure

• · security audit report
• · hardening recommendations

• · OS CLI tools (ufw, pfctl, ss)
• · runtime security CLI if available

Read-only access to host or explicit sudo privileges

• · Cannot infer OS or privilege level
• · Runtime security CLI missing

• · Explicit distinction between OS-level and runtime hardening
• · Model self-check recommendation
• · Staged rollback planning