mirror of
https://github.com/netbirdio/netbird.git
synced 2026-08-25 00:51:28 +02:00
The discovery isolation test drove a single client in the main group. VLLMUnlistedModel's absence from that client's listing was consistent with two different worlds: the listing being scoped to the caller's policy, or the other team's policy never having applied at all. The test passed either way, so it did not prove what it claimed. Mint a setup key per group and join a second client on the other group, reusing the running proxy. The other client must see its own model before the main client's listing is asserted, and must not see the main group's model — isolation is checked in both directions.