fix: bound Work model generation

docs/operations.md

@@ -7,6 +7,8 @@
 - Public host port: `12004`
 - Execution provider: `ssh-docker`
 - Execution host Docker root: `/srv/k1412-data/docker`
+- Runtime model API route: `http://172.31.0.1:3000` (NAS host gateway
+  from the `k1412-agent_egress` network, bypassing the public proxy)
 - Execution host workspace volumes: Docker volumes named
   `k1412-ws-data-<hashed-user-id>`
 
@@ -32,6 +34,11 @@ Copy `deploy/docker-compose.yml`, `deploy/docker-compose.override.yml`, and
 tags and non-secret settings in the protected `.env`, validate with
 `docker compose config`, pull, and recreate.
 
+On the NAS deployment, set `MODEL_API_BASE_URL` to the internal model API route
+listed above. `https://api.k1412.top` remains the external API entrypoint, but
+Runtime must not send long-running Agent inference through the public reverse
+proxy.
+
 The SSH override removes `/var/run/docker.sock` from Gateway and mounts the
 dedicated SSH directory read-only at `/root/.ssh`.