listen:agent_port (default 127.0.0.1:4700) and the sandbox on listen:sandbox_port (default 127.0.0.1:4600). Both share data_dir and fail independently. The spec watcher runs inside up for every upstream with a spec_source. Runs until SIGINT or SIGTERM, then drains for three seconds.
Output
up lints every volatile_fields entry against what has been learned and prints any dead, stable or over-broad entry. See Volatile fields.
Refuses to start when
upstreamsis empty.listenis not loopback and no token is configured.- A sandbox has a webhook sink and its spec declares a signature, but the environment variable the envelope names is unset.
- A
volatile_fieldsentry is malformed. - The salt, the token file, or a config file holding a model key is readable by other users.