# narOS agent user (NAROS.md §6.1): frictionless escalation for `apt install` etc.,
# non-interactive. The disposable, NAT-isolated VM is the isolation boundary.
agent ALL=(ALL) NOPASSWD:ALL