# narOS agent user (NAROS.md §6.1): frictionless escalation for `apt install` etc.,
# mirroring the Linux VM guest's drop-in. The container is the isolation boundary.
agent ALL=(ALL) NOPASSWD:ALL