Final-review Important. packaging/sudoers/hal0-comfyui references comfyui.py:_script_argv + 'sudo -n' which don't exist; routes shell out directly with no sudo; install.sh never installs the sudoers file; planned test_comfyui_sudoers.py missing. On a hardened (non-root) hal0-api the container-control routes 403. OK on root dev box; fix before hardened ship.
Final-review Important. packaging/sudoers/hal0-comfyui references comfyui.py:_script_argv + 'sudo -n' which don't exist; routes shell out directly with no sudo; install.sh never installs the sudoers file; planned test_comfyui_sudoers.py missing. On a hardened (non-root) hal0-api the container-control routes 403. OK on root dev box; fix before hardened ship.