Sync agent state from PC at 2026-05-21 16:53:59

This commit is contained in:
wangzhendong
2026-05-21 16:53:59 +08:00
parent e820370e7b
commit 59622afc1c

View File

@@ -64,8 +64,9 @@ Bring the Windows 11 always-on PC, Tencent Cloud VPS OpenClaw Gateway, phone Con
| T6 | Verify VPS baseline before any VPS change | VPS_VERIFIER | T4 | Accepted | | T6 | Verify VPS baseline before any VPS change | VPS_VERIFIER | T4 | Accepted |
| T7 | Monitor drift, sync-health failures, conflicts, unsafe changes, and missing evidence | CORRECTION | G0A | Claimed | | T7 | Monitor drift, sync-health failures, conflicts, unsafe changes, and missing evidence | CORRECTION | G0A | Claimed |
| T8 | Solidify COACH role, session freeze, and knowledge capture | COACH | T2.1 | Done | | T8 | Solidify COACH role, session freeze, and knowledge capture | COACH | T2.1 | Done |
| T9 | G2 PC foreground node run | PC_EXECUTOR | Fresh user G2 authorization, fresh T13 PASS, T7 healthy | Ready | | T9 | G2 PC foreground node run | PC_EXECUTOR | Fresh user G2 authorization, fresh T13 PASS, T7 healthy | Done |
| T10 | G2 VPS pairing approval | VPS_EXECUTOR | T9, explicit approval authorization | Blocked | | T10A | G2 VPS Gateway pending status read-only check | VPS_EXECUTOR | T9 done, no pairing ID in PC evidence | Ready |
| T10 | G2 VPS pairing approval | VPS_EXECUTOR | T9, explicit approval authorization, matching non-secret request/node ID | Blocked |
| T11 | Verify G2 PC evidence | PC_VERIFIER | T9 | Draft | | T11 | Verify G2 PC evidence | PC_VERIFIER | T9 | Draft |
| T12 | Verify G2 VPS evidence and freeze compliance | VPS_VERIFIER | T10 | Draft | | T12 | Verify G2 VPS evidence and freeze compliance | VPS_VERIFIER | T10 | Draft |
| T13 | Guard G2 sync, secret, and freeze risks | CORRECTION | Fresh user G2 authorization | Ready | | T13 | Guard G2 sync, secret, and freeze risks | CORRECTION | Fresh user G2 authorization | Ready |
@@ -102,7 +103,7 @@ Bring the Windows 11 always-on PC, Tencent Cloud VPS OpenClaw Gateway, phone Con
- Fresh second G2 authorization was received on 2026-05-19 for ORCHESTRATOR in `D:\openclaw-control-plane`; T13 has recorded a fresh PASS with healthy sync, so T9 may proceed under `docs/G2_RUNBOOK.md`. - Fresh second G2 authorization was received on 2026-05-19 for ORCHESTRATOR in `D:\openclaw-control-plane`; T13 has recorded a fresh PASS with healthy sync, so T9 may proceed under `docs/G2_RUNBOOK.md`.
- `docs/G2_RUNBOOK.md` remains the planned G2 procedure, but it does not authorize token injection, `openclaw node run`, VPS approval, or any mutation by itself. - `docs/G2_RUNBOOK.md` remains the planned G2 procedure, but it does not authorize token injection, `openclaw node run`, VPS approval, or any mutation by itself.
- T10 remains blocked until T9 evidence contains a matching non-secret pairing request ID or pending node ID. - T10 remains blocked until T9/T10A evidence contains a matching non-secret pairing request ID or pending node ID. If T10A proves the intended PC node is already online/approved and no approval is required, ORCHESTRATOR may route to G2 verification instead of opening T10.
- G2 must remain foreground-only for the PC node; service persistence belongs to G4. - G2 must remain foreground-only for the PC node; service persistence belongs to G4.
- G2 still forbids service persistence, `openclaw node install/start`, Nginx/Docker/website changes, firewall/network changes, and recording any token or secret. - G2 still forbids service persistence, `openclaw node install/start`, Nginx/Docker/website changes, firewall/network changes, and recording any token or secret.
- G2 must not change the frozen `smartmotor.cloud` homepage, homepage-linked content, static assets, Nginx routing, Docker bind mounts, container images, `/opt/services/docker-compose.openclaw.yml`, or any equivalent website-affecting compose/service entries. - G2 must not change the frozen `smartmotor.cloud` homepage, homepage-linked content, static assets, Nginx routing, Docker bind mounts, container images, `/opt/services/docker-compose.openclaw.yml`, or any equivalent website-affecting compose/service entries.