srt-control web UI for managing sandbox-runtime (srt) network allowlist, plus xterm.js file interrogation sessions over WebSocket. Trunk instance on chromebullet. Service: srt-control-server-trunk.service — code at ~/trunk/srt-control/ with venv at ~/.virtualenvs/srt-control/, entry point srt-control-server. Deployed via vivo from ironclad ~/working/sage/srt-control/. run_as=rohan. Sister instance: srt_control_prod on ironclad (legacy underscore naming, pre-dates Rule 11).