Exitnode management API — TRUNK instance (uvicorn :8009). Always-on, systemd+wrapper (exitnode-api-trunk.service). Rewritten version of the legacy ha_exitnode.service: settings-driven via ~/trunk/exitnode/config/settings.json, structured phase state files at /var/lib/exitnode-api-trunk/state/.json, and stepwise API endpoints (/health, /exitnodes, /exitnode//{state,log,stream,create,destroy}). Python venv ha_tools. Code lives at ~/trunk/exitnode/ on surfaceblack, source of truth at ~/working/bob/exitnode/ on ironclad. Watcher pair restarts on changes to *.py, start.sh, config/settings.json, ~/trunk/secrets.json. main.tf changes do NOT trigger restart (read on-demand by the script).