Files
openclaw-control-plane/tasks/T9-G2-PC-node-run.md
2026-05-19 12:06:32 +08:00

2.1 KiB

T9 - G2 PC Foreground Node Run

Status

draft

Owner

PC_EXECUTOR

Dependencies

  • G0A complete
  • G0B complete
  • G1 accepted
  • User explicitly authorizes G2 execution
  • CORRECTION confirms sync-health is not blocked

Scope

Prepare and run the Windows PC OpenClaw node in foreground mode for Gateway pairing.

This task is not ready until ORCHESTRATOR records explicit user authorization for G2. It does not authorize service installation, startup persistence, firewall changes, network changes, or any public port exposure.

Required Evidence

  • rollback/pc-g2-node-run-YYYYMMDD.md written before token or node-run action.
  • Confirmation that OPENCLAW_GATEWAY_TOKEN was set only in the local shell/session and that the token value was not printed or recorded.
  • Exact foreground node command used, without secrets.
  • Connection status summary and non-secret pairing request ID or pending node ID if shown.
  • Confirmation that no openclaw node install, start, restart, stop, uninstall, firewall, network, scheduled task, environment persistence, or public-port exposure change was performed.
  • Evidence written to evidence/pc-g2-node-run-YYYYMMDD.md.
  • handoff/PC_EXECUTOR.md updated.

Command Drafts

Do not run these until G2 is explicitly authorized.

$env:OPENCLAW_GATEWAY_TOKEN = "<user-pastes-token-locally>"
openclaw node run --host openclaw.smartmotor.cloud --port 443 --tls --display-name "desktop-vuor0gs"

Expected Output

  • Foreground node process remains running.
  • Logs show connection attempt to openclaw.smartmotor.cloud.
  • Pairing request ID or pending node ID appears if approval is required.
  • No secret value appears in evidence.

Stop Conditions

  • User authorization is absent or ambiguous.
  • Any command asks to print, persist, or store a token.
  • Any command prints a secret.
  • Any step requires PC service install/start, scheduled task changes, firewall changes, network changes, or public port exposure.
  • Gateway host or display name differs from the runbook without ORCHESTRATOR review.

Acceptance

PC_VERIFIER must review this evidence before ORCHESTRATOR can count the PC half of G2 as accepted.