Research & Lab Update: September 4, 2026

Prisma AIRS Live Lab Scaffolding

The working specification for Palo Alto Networks Prisma AIRS runtime security interception is now formalized under /research/palo/. The live lab runbook establishes an inline gateway architecture, standardizing request routing JSON structures, an error taxonomy covering HTTP 400 through 502 inspection events, and an integration matrix aligned with NIST AI RMF controls. Final gateway deployment and automated test sweeps remain gated on API credential provisioning.

Stargate Ansible Path & Collection Alignment

Ansible collection paths have been consolidated onto stargate's local NVMe storage pool (/mnt/clusterfs2/workspace/lab-franklin). Key remediations applied:

• Normalized collection hierarchy under the canonical lab.franklin namespace.
• Declared explicit role dependencies in meta/main.yml (linking common to python runtime baselines).
• Configured local temporary cache paths in ansible.cfg to resolve cache directory creation failures.

Decommissioning head2

All active configuration artifacts for head2 (10.10.12.14 / 10.10.12.19) have been excised from the environment. This includes BIND DNS forward/reverse zone maps, ISC-DHCP static leases, cfssl PKI profiles, NFS export defaults, and active inventory groups across the Ansible control repo. Documentation in the Lab Operations Manual now reflects its retired state.