The baked deploy/config.toml rule named zone pds.did.bot, so the live sidecar found no eligible agents: every agent is in test.pds.did.bot. It now names test.pds.did.bot, as intended: the test zone grants every in-scope repo. With this image, a dry run against live pds.did.bot plans 16 grants (9 for permadeath.com, 7 for lance.blue) to my account, the one agent with a published key.
🤖 Generated with Claude Code