# Region HA spec 2 §5 step 5.3: the relay from a joining box's sandboxed
# agent to root's half of joining. The agent (User=carlos,
# ProtectSystem=strict) sees the console's invitation but cannot write /etc
# or arm the host lifecycle guard; it touches this marker and root does the
# rest, as carlos-system-update.path relays a self-update. Root takes
# nothing from the marker: it reads and verifies the invitation itself.
[Unit]
Description=carlos joining: arm the host lifecycle guard on agent request

[Path]
PathChanged=/data/system-join-requested
Unit=carlos-system-join.service

[Install]
WantedBy=multi-user.target