# srv-local-shield

## Purpose

Local shield node: boundary services (gateway, filtering, segmentation).

## Authority boundary

- Provisioning and changes originate from `op-core-vm`.
- Configuration is managed as code; rebuilds are expected.