diff --git a/evidence/pc-baseline-20260515.md b/evidence/pc-baseline-20260515.md new file mode 100644 index 0000000..4d1778e --- /dev/null +++ b/evidence/pc-baseline-20260515.md @@ -0,0 +1,165 @@ +# PC Baseline Evidence - 2026-05-15 + +Owner: PC_EXECUTOR + +Scope: T3-PC-baseline, read-only Windows PC baseline discovery. + +## Safety Confirmation + +- No token was set, printed, or written. +- No `openclaw node run`, `install`, `start`, or `stop` command was executed. +- No service, scheduled task, firewall rule, environment variable, or port exposure setting was changed. +- Gateway check was outbound-only: `Test-NetConnection openclaw.smartmotor.cloud -Port 443`. + +## Workspace Check + +```text +Timestamp: 2026-05-15T11:50:19.7908259+08:00 +WorkingDirectory: D:\openclaw-control-plane +Evidence directory present: yes +``` + +## OpenClaw CLI + +Command: + +```powershell +openclaw --version +``` + +Output: + +```text +OpenClaw 2026.5.7 (eeef486) +``` + +Command: + +```powershell +openclaw node --help +``` + +Output: + +```text +OpenClaw 2026.5.7 (eeef486) + +Usage: openclaw node [options] [command] + +Run and manage the headless node host service + +Options: + -h, --help Display help for command + +Commands: + help Display help for command + install Install the node host service (launchd/systemd/schtasks) + restart Restart the node host service (launchd/systemd/schtasks) + run Run the headless node host (foreground) + start Start the node host service (launchd/systemd/schtasks) + status Show node host status + stop Stop the node host service (launchd/systemd/schtasks) + uninstall Uninstall the node host service (launchd/systemd/schtasks) + +Examples: + openclaw node run --host 127.0.0.1 --port 18789 + Run the node host in the foreground. + openclaw node status + Check node host service status. + openclaw node install + Install the node host service. + openclaw node start + Start the installed node host service. + openclaw node restart + Restart the installed node host service. + +Docs: https://docs.openclaw.ai/cli/node +``` + +## Tailscale + +Command: + +```powershell +where.exe tailscale +``` + +Output: + +```text +C:\Program Files\Tailscale\tailscale.exe +C:\Program Files\Tailscale\tailscale.exe exists +``` + +Command: + +```powershell +tailscale ip -4 +``` + +Output: + +```text +100.125.185.1 +``` + +Command: + +```powershell +tailscale status --self +``` + +Output: + +```text +100.125.185.1 desktop-vuor0gs wzd1123@ windows - +``` + +Summary: Tailscale CLI is available, the PC has Tailnet IPv4 `100.125.185.1`, and the self status is not logged out. + +## Gateway Outbound 443 + +Command: + +```powershell +Test-NetConnection openclaw.smartmotor.cloud -Port 443 +``` + +Output: + +```text +ComputerName : openclaw.smartmotor.cloud +RemoteAddress : 198.18.0.242 +RemotePort : 443 +InterfaceAlias : Meta +SourceAddress : 198.18.0.1 +TcpTestSucceeded : True +``` + +Summary: outbound TCP 443 to `openclaw.smartmotor.cloud` succeeded. + +## Public Port Exposure Check + +Command: + +```powershell +Get-Process -Name openclaw -ErrorAction SilentlyContinue +Get-NetFirewallRule -Enabled True -Direction Inbound -Action Allow | Where-Object { $_.DisplayName -match 'OpenClaw|openclaw' -or $_.Name -match 'OpenClaw|openclaw' } +Get-NetTCPConnection -State Listen | Where-Object { $openclawProcessIds -contains $_.OwningProcess } +``` + +Output: + +```text +## OpenClaw process check +## Enabled inbound firewall allow rules matching OpenClaw +No enabled inbound allow firewall rules matching OpenClaw were found. +## Listening TCP ports owned by OpenClaw processes +No OpenClaw processes found; no OpenClaw-owned listening TCP ports to report. +``` + +Summary: No OpenClaw process, OpenClaw inbound allow firewall rule, or OpenClaw-owned listening TCP port was found. No PC service port was exposed by this task. + +## Result + +T3 read-only PC baseline discovery is complete and ready for PC_VERIFIER review. This is not self-acceptance. diff --git a/handoff/PC_EXECUTOR.md b/handoff/PC_EXECUTOR.md index b5b793d..be608c2 100644 --- a/handoff/PC_EXECUTOR.md +++ b/handoff/PC_EXECUTOR.md @@ -27,15 +27,26 @@ From `OPENCLAW_EXEC_NODE_PLAN.md`: - Tailscale service exists and was later logged in with PC Tailnet IP `100.125.185.1`. - Next planned OpenClaw work is C1 token injection, C2 `node run`, then C3 VPS approval. +## T3 Baseline Discovery - 2026-05-15 + +- Evidence written to `evidence/pc-baseline-20260515.md`. +- `openclaw --version` returned `OpenClaw 2026.5.7 (eeef486)`. +- `openclaw node --help` showed node commands including `run`, `install`, `status`, `start`, `stop`, and `uninstall`. +- Tailscale executable found at `C:\Program Files\Tailscale\tailscale.exe`. +- Tailscale self status showed PC `desktop-vuor0gs` with Tailnet IPv4 `100.125.185.1`. +- `Test-NetConnection openclaw.smartmotor.cloud -Port 443` returned `TcpTestSucceeded : True`. +- No OpenClaw process, OpenClaw inbound allow firewall rule, or OpenClaw-owned listening TCP port was found. +- No token was set or printed; no node `run`, `install`, `start`, or `stop` command was executed. +- No service, scheduled task, firewall rule, environment variable, or port exposure setting was changed. +- Waiting for PC_VERIFIER review; PC_EXECUTOR does not self-accept this work. + ## Next Read-Only Task -After the Gitea control plane is synchronized, collect current PC baseline evidence: +T3 baseline evidence has been collected. Next action belongs to PC_VERIFIER: -- `openclaw --version` -- `openclaw node --help` -- Tailscale CLI path and login status -- `Test-NetConnection openclaw.smartmotor.cloud -Port 443` +- Review `evidence/pc-baseline-20260515.md`. +- Independently validate the PC baseline before any PC change. ## Last Update -Template created during control-plane bootstrap. +2026-05-15: T3 baseline discovery completed by PC_EXECUTOR; waiting for PC_VERIFIER. diff --git a/tasks/T3-PC-baseline.md b/tasks/T3-PC-baseline.md index 54ba8ab..fa39b7c 100644 --- a/tasks/T3-PC-baseline.md +++ b/tasks/T3-PC-baseline.md @@ -2,7 +2,7 @@ ## Status -ready +done ## Owner @@ -43,3 +43,10 @@ This task is read-only only. It must not install services, edit firewall rules, ## Acceptance PC_VERIFIER must review the evidence before this task is accepted. + +## Completion Notes + +- 2026-05-15 PC_EXECUTOR completed read-only baseline discovery. +- Evidence: `evidence/pc-baseline-20260515.md`. +- Handoff updated: `handoff/PC_EXECUTOR.md`. +- Waiting for PC_VERIFIER review; not self-accepted.