f0aa913014
Captures the design discussion for persistent extern/intern networks, -n/--network, and -p port forwarding: root-only Linux bridge+veth (no slirp4netns needed once root is assumed), extern vs intern differing only in where the bridge lives, iptables-based DNAT for -p, and the subnet/IPv6/CLI/config-schema decisions. No code yet -- this is the confirmed design to implement against.