Add the presentation-free acdream-headless executable, strict no-connect configuration validation, dependency and assembly guards, and a Windows/Ubuntu CI lane that builds and tests only the portable runtime closure.
Co-authored-by: Codex <noreply@openai.com>
Yesterday's run reported Finding #5 because the sandboxed agent
runner couldn't reach api.nuget.org or
dc.services.visualstudio.com, so 'dotnet restore' failed and the
build/test hygiene check produced no signal. Added the 'dotnet'
ecosystem identifier to network.allowed so nuget restore + telemetry
are reachable inside the sandbox.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>