Sync agent state from PC at 2026-05-15 11:59:55

evidence/pc-baseline-20260515.md

@@ -0,0 +1,165 @@
+# PC Baseline Evidence - 2026-05-15
+
+Owner: PC_EXECUTOR
+
+Scope: T3-PC-baseline, read-only Windows PC baseline discovery.
+
+## Safety Confirmation
+
+- No token was set, printed, or written.
+- No `openclaw node run`, `install`, `start`, or `stop` command was executed.
+- No service, scheduled task, firewall rule, environment variable, or port exposure setting was changed.
+- Gateway check was outbound-only: `Test-NetConnection openclaw.smartmotor.cloud -Port 443`.
+
+## Workspace Check
+
+```text
+Timestamp: 2026-05-15T11:50:19.7908259+08:00
+WorkingDirectory: D:\openclaw-control-plane
+Evidence directory present: yes
+```
+
+## OpenClaw CLI
+
+Command:
+
+```powershell
+openclaw --version
+```
+
+Output:
+
+```text
+OpenClaw 2026.5.7 (eeef486)
+```
+
+Command:
+
+```powershell
+openclaw node --help
+```
+
+Output:
+
+```text
+OpenClaw 2026.5.7 (eeef486)
+
+Usage: openclaw node [options] [command]
+
+Run and manage the headless node host service
+
+Options:
+  -h, --help  Display help for command
+
+Commands:
+  help        Display help for command
+  install     Install the node host service (launchd/systemd/schtasks)
+  restart     Restart the node host service (launchd/systemd/schtasks)
+  run         Run the headless node host (foreground)
+  start       Start the node host service (launchd/systemd/schtasks)
+  status      Show node host status
+  stop        Stop the node host service (launchd/systemd/schtasks)
+  uninstall   Uninstall the node host service (launchd/systemd/schtasks)
+
+Examples:
+  openclaw node run --host 127.0.0.1 --port 18789
+    Run the node host in the foreground.
+  openclaw node status
+    Check node host service status.
+  openclaw node install
+    Install the node host service.
+  openclaw node start
+    Start the installed node host service.
+  openclaw node restart
+    Restart the installed node host service.
+
+Docs: https://docs.openclaw.ai/cli/node
+```
+
+## Tailscale
+
+Command:
+
+```powershell
+where.exe tailscale
+```
+
+Output:
+
+```text
+C:\Program Files\Tailscale\tailscale.exe
+C:\Program Files\Tailscale\tailscale.exe exists
+```
+
+Command:
+
+```powershell
+tailscale ip -4
+```
+
+Output:
+
+```text
+100.125.185.1
+```
+
+Command:
+
+```powershell
+tailscale status --self
+```
+
+Output:
+
+```text
+100.125.185.1  desktop-vuor0gs  wzd1123@  windows  -
+```
+
+Summary: Tailscale CLI is available, the PC has Tailnet IPv4 `100.125.185.1`, and the self status is not logged out.
+
+## Gateway Outbound 443
+
+Command:
+
+```powershell
+Test-NetConnection openclaw.smartmotor.cloud -Port 443
+```
+
+Output:
+
+```text
+ComputerName     : openclaw.smartmotor.cloud
+RemoteAddress    : 198.18.0.242
+RemotePort       : 443
+InterfaceAlias   : Meta
+SourceAddress    : 198.18.0.1
+TcpTestSucceeded : True
+```
+
+Summary: outbound TCP 443 to `openclaw.smartmotor.cloud` succeeded.
+
+## Public Port Exposure Check
+
+Command:
+
+```powershell
+Get-Process -Name openclaw -ErrorAction SilentlyContinue
+Get-NetFirewallRule -Enabled True -Direction Inbound -Action Allow | Where-Object { $_.DisplayName -match 'OpenClaw|openclaw' -or $_.Name -match 'OpenClaw|openclaw' }
+Get-NetTCPConnection -State Listen | Where-Object { $openclawProcessIds -contains $_.OwningProcess }
+```
+
+Output:
+
+```text
+## OpenClaw process check
+## Enabled inbound firewall allow rules matching OpenClaw
+No enabled inbound allow firewall rules matching OpenClaw were found.
+## Listening TCP ports owned by OpenClaw processes
+No OpenClaw processes found; no OpenClaw-owned listening TCP ports to report.
+```
+
+Summary: No OpenClaw process, OpenClaw inbound allow firewall rule, or OpenClaw-owned listening TCP port was found. No PC service port was exposed by this task.
+
+## Result
+
+T3 read-only PC baseline discovery is complete and ready for PC_VERIFIER review. This is not self-acceptance.

handoff/PC_EXECUTOR.md

@@ -27,15 +27,26 @@ From `OPENCLAW_EXEC_NODE_PLAN.md`:
 - Tailscale service exists and was later logged in with PC Tailnet IP `100.125.185.1`.
 - Next planned OpenClaw work is C1 token injection, C2 `node run`, then C3 VPS approval.
 
+## T3 Baseline Discovery - 2026-05-15
+
+- Evidence written to `evidence/pc-baseline-20260515.md`.
+- `openclaw --version` returned `OpenClaw 2026.5.7 (eeef486)`.
+- `openclaw node --help` showed node commands including `run`, `install`, `status`, `start`, `stop`, and `uninstall`.
+- Tailscale executable found at `C:\Program Files\Tailscale\tailscale.exe`.
+- Tailscale self status showed PC `desktop-vuor0gs` with Tailnet IPv4 `100.125.185.1`.
+- `Test-NetConnection openclaw.smartmotor.cloud -Port 443` returned `TcpTestSucceeded : True`.
+- No OpenClaw process, OpenClaw inbound allow firewall rule, or OpenClaw-owned listening TCP port was found.
+- No token was set or printed; no node `run`, `install`, `start`, or `stop` command was executed.
+- No service, scheduled task, firewall rule, environment variable, or port exposure setting was changed.
+- Waiting for PC_VERIFIER review; PC_EXECUTOR does not self-accept this work.
+
 ## Next Read-Only Task
 
-After the Gitea control plane is synchronized, collect current PC baseline evidence:
+T3 baseline evidence has been collected. Next action belongs to PC_VERIFIER:
 
-- `openclaw --version`
-- `openclaw node --help`
-- Tailscale CLI path and login status
-- `Test-NetConnection openclaw.smartmotor.cloud -Port 443`
+- Review `evidence/pc-baseline-20260515.md`.
+- Independently validate the PC baseline before any PC change.
 
 ## Last Update
 
-Template created during control-plane bootstrap.
+2026-05-15: T3 baseline discovery completed by PC_EXECUTOR; waiting for PC_VERIFIER.

tasks/T3-PC-baseline.md

@@ -2,7 +2,7 @@
 
 ## Status
 
-ready
+done
 
 ## Owner
 
@@ -43,3 +43,10 @@ This task is read-only only. It must not install services, edit firewall rules,
 ## Acceptance
 
 PC_VERIFIER must review the evidence before this task is accepted.
+
+## Completion Notes
+
+- 2026-05-15 PC_EXECUTOR completed read-only baseline discovery.
+- Evidence: `evidence/pc-baseline-20260515.md`.
+- Handoff updated: `handoff/PC_EXECUTOR.md`.
+- Waiting for PC_VERIFIER review; not self-accepted.