wangzhendong/openclaw-control-plane
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sync agent state from VPS at 2026-05-19 12:16:58

Browse Source
This commit is contained in:
ubuntu
2026-05-19 12:16:58 +08:00
parent 0a18497dc8
commit 1400aea060
2 changed files with 22 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
AGENT_BOARD.md
View File

@@ -45,7 +45,7 @@ Bring the Windows 11 always-on PC, Tencent Cloud VPS OpenClaw Gateway, phone Con
| G0A Collaboration mechanism aligned | User-approved agent roles, Git polling MVP, sync-health handling, status entry, and hard safety boundaries | ORCHESTRATOR | Done |
| G0B OpenClaw system requirements aligned | User-approved target architecture, component boundaries, PC permissions, Tailscale role, phone/QQ behavior, and G2/G3/G4 acceptance criteria | ORCHESTRATOR | Done |
| G1 Baseline discovered | PC and VPS read-only status snapshots accepted by independent verifiers | PC_EXECUTOR, VPS_EXECUTOR, verifiers | Done |
| G2 Gateway/node pairing ready | PC `node run` evidence and VPS approval evidence | PC_EXECUTOR, VPS_EXECUTOR | Pending |
| G2 Gateway/node pairing ready | PC `node run` evidence and VPS approval evidence | PC_EXECUTOR, VPS_EXECUTOR | In Progress |
| G3 Execution smoke test | Harmless command result proves execution came from the PC node | PC_VERIFIER | Pending |
| G4 Persistent service verified | `node install/start/status` and reboot survival evidence | PC_VERIFIER, CORRECTION | Pending |
| G5 Security posture reviewed | Secrets absent, public exposure avoided, least-privilege notes captured | VPS_VERIFIER, CORRECTION | Pending |
@@ -64,11 +64,11 @@ Bring the Windows 11 always-on PC, Tencent Cloud VPS OpenClaw Gateway, phone Con
| T6 | Verify VPS baseline before any VPS change | VPS_VERIFIER | T4 | Accepted |
| T7 | Monitor drift, sync-health failures, conflicts, unsafe changes, and missing evidence | CORRECTION | G0A | Claimed |
| T8 | Solidify COACH role, session freeze, and knowledge capture | COACH | T2.1 | Done |
| T9 | G2 PC foreground node run | PC_EXECUTOR | User G2 authorization, T7 healthy | Draft |
| T9 | G2 PC foreground node run | PC_EXECUTOR | User G2 authorization, T7 healthy | Ready |
| T10 | G2 VPS pairing approval | VPS_EXECUTOR | T9, explicit approval authorization | Draft |
| T11 | Verify G2 PC evidence | PC_VERIFIER | T9 | Draft |
| T12 | Verify G2 VPS evidence and freeze compliance | VPS_VERIFIER | T10 | Draft |
| T13 | Guard G2 sync, secret, and freeze risks | CORRECTION | User G2 authorization | Draft |
| T13 | Guard G2 sync, secret, and freeze risks | CORRECTION | User G2 authorization | Ready |
## Confirmed OpenClaw Target Design
@@ -100,9 +100,10 @@ Bring the Windows 11 always-on PC, Tencent Cloud VPS OpenClaw Gateway, phone Con
## G2 Authorization Boundary
- `docs/G2_RUNBOOK.md` and T9-T13 are planning artifacts only while G2 is pending.
- G2 requires explicit user authorization before token injection, `openclaw node run`, VPS pairing approval, or any executor action.
- User authorized G2 on 2026-05-19 for foreground PC node run and corresponding VPS pairing approval only.
- T9 may proceed under `docs/G2_RUNBOOK.md`; T10 must wait for T9 evidence with a non-secret request/node ID before any approval.
- G2 must remain foreground-only for the PC node; service persistence belongs to G4.
- G2 still forbids service persistence, `openclaw node install/start`, Nginx/Docker/website changes, firewall/network changes, and recording any token or secret.
- G2 must not change the frozen `smartmotor.cloud` homepage, homepage-linked content, static assets, Nginx routing, Docker bind mounts, container images, `/opt/services/docker-compose.openclaw.yml`, or any equivalent website-affecting compose/service entries.
## Operating Rules