62 lines
2.1 KiB
Markdown
62 lines
2.1 KiB
Markdown
# T9 - G2 PC Foreground Node Run
|
|
|
|
## Status
|
|
|
|
draft
|
|
|
|
## Owner
|
|
|
|
PC_EXECUTOR
|
|
|
|
## Dependencies
|
|
|
|
- G0A complete
|
|
- G0B complete
|
|
- G1 accepted
|
|
- User explicitly authorizes G2 execution
|
|
- CORRECTION confirms sync-health is not blocked
|
|
|
|
## Scope
|
|
|
|
Prepare and run the Windows PC OpenClaw node in foreground mode for Gateway pairing.
|
|
|
|
This task is not ready until ORCHESTRATOR records explicit user authorization for G2. It does not authorize service installation, startup persistence, firewall changes, network changes, or any public port exposure.
|
|
|
|
## Required Evidence
|
|
|
|
- `rollback/pc-g2-node-run-YYYYMMDD.md` written before token or node-run action.
|
|
- Confirmation that `OPENCLAW_GATEWAY_TOKEN` was set only in the local shell/session and that the token value was not printed or recorded.
|
|
- Exact foreground node command used, without secrets.
|
|
- Connection status summary and non-secret pairing request ID or pending node ID if shown.
|
|
- Confirmation that no `openclaw node install`, `start`, `restart`, `stop`, `uninstall`, firewall, network, scheduled task, environment persistence, or public-port exposure change was performed.
|
|
- Evidence written to `evidence/pc-g2-node-run-YYYYMMDD.md`.
|
|
- `handoff/PC_EXECUTOR.md` updated.
|
|
|
|
## Command Drafts
|
|
|
|
Do not run these until G2 is explicitly authorized.
|
|
|
|
```powershell
|
|
$env:OPENCLAW_GATEWAY_TOKEN = "<user-pastes-token-locally>"
|
|
openclaw node run --host openclaw.smartmotor.cloud --port 443 --tls --display-name "desktop-vuor0gs"
|
|
```
|
|
|
|
## Expected Output
|
|
|
|
- Foreground node process remains running.
|
|
- Logs show connection attempt to `openclaw.smartmotor.cloud`.
|
|
- Pairing request ID or pending node ID appears if approval is required.
|
|
- No secret value appears in evidence.
|
|
|
|
## Stop Conditions
|
|
|
|
- User authorization is absent or ambiguous.
|
|
- Any command asks to print, persist, or store a token.
|
|
- Any command prints a secret.
|
|
- Any step requires PC service install/start, scheduled task changes, firewall changes, network changes, or public port exposure.
|
|
- Gateway host or display name differs from the runbook without ORCHESTRATOR review.
|
|
|
|
## Acceptance
|
|
|
|
PC_VERIFIER must review this evidence before ORCHESTRATOR can count the PC half of G2 as accepted.
|