Status: IN
FTL2 host provisioning is safe from first connection: SSH readiness gating (wait_for_ssh with configurable timeout and wait_for TCP port checks) ensures the host is reachable before two-phase bootstrap (root → admin re-registration → security hardening → content deployment) begins.