A fleet host provisions machines by having an agent clone a repository there
and register it, which the fence refused as a change to the environment.
Adding a project leaves everything already there as it was, so linked work
may create and clone projects with full access; it still cannot change or
delete existing ones, settings, or scheduled tasks.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>