{
  "machines": [
    {
      "id": "local",
      "title": "Control plane (this host)",
      "kind": "local",
      "host": "127.0.0.1",
      "enabled": true,
      "capacity": 32,
      "roles": ["*"]
    },
    {
      "id": "ns1",
      "title": "NS1.GEORGELAMBERT.ORG",
      "kind": "ssh",
      "host": "70.88.205.138",
      "user": "marchon",
      "sshPort": 22,
      "identityFile": "~/.ssh/id_ed25519",
      "remoteDir": "~/verae-fleet-runtime",
      "enabled": true,
      "capacity": 24,
      "roles": [
        "tree-node",
        "archive-worm",
        "archive-aggregator",
        "job-poller",
        "webhook-deliver"
      ],
      "notes": "SSH as marchon with ~/.ssh/id_ed25519. Workers bind 127.0.0.1 on NS1; control plane probes via ssh+curl. Private key is never stored in git."
    },
    {
      "id": "lan-134",
      "title": "70.88.205.134",
      "kind": "ssh",
      "host": "70.88.205.134",
      "user": "marchon",
      "sshPort": 22,
      "identityFile": "~/.ssh/id_ed25519",
      "remoteDir": "~/verae-fleet-runtime",
      "enabled": false,
      "capacity": 12,
      "roles": ["tree-node", "archive-worm"],
      "notes": "Same user/key as NS1. Enable after confirming node is on PATH."
    }
  ]
}