📝 docs(readme): correct exec-denial reasons and index the exec examples

[scttbnsn]

Summary

• README.md: deny-all sockguard.yaml preset returns 403 not allowed by portwing preset (not the with-exec preset's exec denied: no commands are allowlisted); clarified that the denial reason now reaches portwing's exec error and is forwarded in the exec_end reason to the controller (drydock-side display still pending)
• examples/docker-compose.edge-with-exec.yml: same correction in the header comment, plus a pointer to sockguard's audited examples/compose/tri-tool/ bundle
• examples/README.md: indexed docker-compose.edge-with-exec.yml and sockguard-with-exec.yaml (added in 🐛 fix(docker): surface proxy/daemon error bodies in exec errors #77, missing from the table)
• docs/content/docs/drydock-integration.mdx: documented the exec_* Edge Mode message types (exec_start/exec_ready/exec_input/exec_output/exec_resize/exec_end) and noted exec_end's reason field

Docs-only, no CHANGELOG entry.

Test plan

• git status in the worktree shows only the four intended files changed
• pre-commit/pre-push lefthook gates passed (gofmt/commit-msg/go-lint/go-test/govulncheck/go-fuzz/clean-tree)

Changelog

• 🐛 Fixed documentation distinguishing exec-denial responses for deny-all and exec-enabled presets.
• 🔧 Changed documentation for forwarding denial reasons through Portwing errors and exec_end.
• ✨ Added documentation for Edge Mode exec_* messages and exec_end.reason.
• ✨ Added the edge-with-exec example to the examples index.
• 🔒 Documented the audited Sockguard tri-tool bundle reference.

Concerns

• Ensure the documented exec_end.reason behavior remains accurate while Drydock does not yet display the reason.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 14790bbd-38b4-4dc0-ab79-e5a3cb8e86ef

📥 Commits

Reviewing files that changed from the base of the PR and between 5d51c11 and 540ef26.

📒 Files selected for processing (4)

• README.md
• docs/content/docs/drydock-integration.mdx
• examples/README.md
• examples/docker-compose.edge-with-exec.yml

---

📝 Walkthrough

Walkthrough

Updated documentation for sockguard exec-denial behavior and Edge Mode interactive exec protocol messages. The changes describe exec_end.reason propagation, immediate failure signaling, and adapter handling. The examples documentation now lists the exec-enabled compose and sockguard policy pairing, while the compose comments clarify that the exec-enabled preset is required for proxy-side rejection behavior.

Possibly related issues

• Surface the exec_end reason from edge agents in controller-side exec errors drydock#635 — Covers the controller-side handling of exec_end denial reasons documented by this PR.

Possibly related PRs

• CodesWhat/portwing#58 — Updates related Edge Mode exec_start protocol documentation.
• CodesWhat/portwing#77 — Implements the exec-denial reason propagation described here.
• CodesWhat/portwing#80 — Adds parsing and tests for Docker/sockguard exec error reasons.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch docs/exec-audit-fixes

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[scttbnsn]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[scttbnsn]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[biggest-littlest]

LGTM

[ALARGECOMPANY]

LGTM