Sync agent state from PC at 2026-05-19 12:06:32

tasks/T9-G2-PC-node-run.md

@@ -0,0 +1,61 @@
+# T9 - G2 PC Foreground Node Run
+
+## Status
+
+draft
+
+## Owner
+
+PC_EXECUTOR
+
+## Dependencies
+
+- G0A complete
+- G0B complete
+- G1 accepted
+- User explicitly authorizes G2 execution
+- CORRECTION confirms sync-health is not blocked
+
+## Scope
+
+Prepare and run the Windows PC OpenClaw node in foreground mode for Gateway pairing.
+
+This task is not ready until ORCHESTRATOR records explicit user authorization for G2. It does not authorize service installation, startup persistence, firewall changes, network changes, or any public port exposure.
+
+## Required Evidence
+
+- `rollback/pc-g2-node-run-YYYYMMDD.md` written before token or node-run action.
+- Confirmation that `OPENCLAW_GATEWAY_TOKEN` was set only in the local shell/session and that the token value was not printed or recorded.
+- Exact foreground node command used, without secrets.
+- Connection status summary and non-secret pairing request ID or pending node ID if shown.
+- Confirmation that no `openclaw node install`, `start`, `restart`, `stop`, `uninstall`, firewall, network, scheduled task, environment persistence, or public-port exposure change was performed.
+- Evidence written to `evidence/pc-g2-node-run-YYYYMMDD.md`.
+- `handoff/PC_EXECUTOR.md` updated.
+
+## Command Drafts
+
+Do not run these until G2 is explicitly authorized.
+
+```powershell
+$env:OPENCLAW_GATEWAY_TOKEN = "<user-pastes-token-locally>"
+openclaw node run --host openclaw.smartmotor.cloud --port 443 --tls --display-name "desktop-vuor0gs"
+```
+
+## Expected Output
+
+- Foreground node process remains running.
+- Logs show connection attempt to `openclaw.smartmotor.cloud`.
+- Pairing request ID or pending node ID appears if approval is required.
+- No secret value appears in evidence.
+
+## Stop Conditions
+
+- User authorization is absent or ambiguous.
+- Any command asks to print, persist, or store a token.
+- Any command prints a secret.
+- Any step requires PC service install/start, scheduled task changes, firewall changes, network changes, or public port exposure.
+- Gateway host or display name differs from the runbook without ORCHESTRATOR review.
+
+## Acceptance
+
+PC_VERIFIER must review this evidence before ORCHESTRATOR can count the PC half of G2 as accepted.