The sidecar now runs as a container from its public ECR image, public.ecr.aws/i7w5y2e0/tangled-collaborator-sidecar (image_repository). The instance's first boot installs Docker, the container's unit, and a timer. Every 5 minutes the timer pulls :latest, and restarts the container only when the image changed. The container runs as distroless's non-root user, read-only, with only NET_BIND_SERVICE, and its data directory mounted at /data.
A deploy is now publishing the image from the sidecar repo. There is no SSH step, and the instance holds no credentials. docs/sidecar.md covers apply, publish, then sign in.
🤖 Generated with Claude Code