dr(w3): stage disposable VPS restore wrapper #521

Merged

pdurlej merged 1 commit from codex/w3d-disposable-vps-pass into main

2026-05-27 11:53:00 +02:00

codex commented

2026-05-27 11:34:58 +02:00

Collaborator

Canary status: missing - not fired; touched scripts/dr/ and W3 status evidence only, not mandatory canary paths.

Canary Context Pack

Product story

W3d option 1 is merged and green. Option 2 should be executable without giving a fresh disposable VPS direct RS2000 credentials or accidentally using the live vps1000 OpenClaw runtime as a sandbox.

What changed

Added scripts/dr/w3d-disposable-vps-drill.sh, a wrapper for running the W3d restore harness on a clean SSH target.
Extended scripts/dr/w3d-local-sandbox-drill.sh with pre-staged/offline backup mode and configurable report/mutation wording.
Updated W3 output with the one remaining input: W3D_TARGET_HOST=<clean disposable SSH host alias>.

Why it changed

The local pass proved restore choreography. The disposable VPS pass needs the same drill on a clean remote host, but the available SSH targets are live platform hosts (rs2000, vps1000) or local companion machines, not disposable VPS targets.

Files touched

scripts/dr/w3d-local-sandbox-drill.sh
scripts/dr/w3d-disposable-vps-drill.sh
state/cycle/W3-dr-restore-confidence-output.md

Runtime evidence

No restore run was executed in this PR. Validation performed:

git diff --check
bash -n scripts/dr/w3d-local-sandbox-drill.sh
bash -n scripts/dr/w3d-disposable-vps-drill.sh
PYTHONPATH=control-plane python3 -m platformctl.cli validate all --json
negative guard: W3D_TARGET_HOST=vps1000 scripts/dr/w3d-disposable-vps-drill.sh refuses with exit 2.

Known constraints

The wrapper stages backup artifacts and the Honcho image through the operator machine, then copies them to the target and runs the existing harness in offline mode. It intentionally refuses rs2000, vps1000, and their current direct IPs as disposable targets.

Explicit out-of-scope

Provisioning a new VPS.
Running on vps1000.
Production restore/restart/apply/promote.
Semantic OpenClaw/Iskra persona restore.

Requested decision

Merge as pass-2 readiness. Actual disposable VPS execution requires one clean SSH target alias.

Merge blockers

Wrapper can leak secrets or raw private content.
Wrapper can accidentally run on live platform hosts.
Offline/pre-staged mode weakens the already-green local harness.

Spec sources read

AGENTS.md - repo operating contract.
docs/forgejo-agent-operations.md - Forgejo write identity contract.
state/cycle/W3-dr-restore-confidence-output.md - W3d acceptance and current local pass state.
state/reports/w3d-local-sandbox-drill-2026-05-27.md - local pass evidence.
#433 - W3d target and gate issue.

Refs #433

Canary status: missing - not fired; touched `scripts/dr/` and W3 status evidence only, not mandatory canary paths. ## Canary Context Pack ### Product story W3d option 1 is merged and green. Option 2 should be executable without giving a fresh disposable VPS direct RS2000 credentials or accidentally using the live `vps1000` OpenClaw runtime as a sandbox. ### What changed - Added `scripts/dr/w3d-disposable-vps-drill.sh`, a wrapper for running the W3d restore harness on a clean SSH target. - Extended `scripts/dr/w3d-local-sandbox-drill.sh` with pre-staged/offline backup mode and configurable report/mutation wording. - Updated W3 output with the one remaining input: `W3D_TARGET_HOST=<clean disposable SSH host alias>`. ### Why it changed The local pass proved restore choreography. The disposable VPS pass needs the same drill on a clean remote host, but the available SSH targets are live platform hosts (`rs2000`, `vps1000`) or local companion machines, not disposable VPS targets. ### Files touched - `scripts/dr/w3d-local-sandbox-drill.sh` - `scripts/dr/w3d-disposable-vps-drill.sh` - `state/cycle/W3-dr-restore-confidence-output.md` ### Runtime evidence No restore run was executed in this PR. Validation performed: - `git diff --check` - `bash -n scripts/dr/w3d-local-sandbox-drill.sh` - `bash -n scripts/dr/w3d-disposable-vps-drill.sh` - `PYTHONPATH=control-plane python3 -m platformctl.cli validate all --json` - negative guard: `W3D_TARGET_HOST=vps1000 scripts/dr/w3d-disposable-vps-drill.sh` refuses with exit `2`. ### Known constraints The wrapper stages backup artifacts and the Honcho image through the operator machine, then copies them to the target and runs the existing harness in offline mode. It intentionally refuses `rs2000`, `vps1000`, and their current direct IPs as disposable targets. ### Explicit out-of-scope - Provisioning a new VPS. - Running on `vps1000`. - Production restore/restart/apply/promote. - Semantic OpenClaw/Iskra persona restore. ### Requested decision Merge as pass-2 readiness. Actual disposable VPS execution requires one clean SSH target alias. ### Merge blockers - Wrapper can leak secrets or raw private content. - Wrapper can accidentally run on live platform hosts. - Offline/pre-staged mode weakens the already-green local harness. ## Spec sources read - `AGENTS.md` - repo operating contract. - `docs/forgejo-agent-operations.md` - Forgejo write identity contract. - `state/cycle/W3-dr-restore-confidence-output.md` - W3d acceptance and current local pass state. - `state/reports/w3d-local-sandbox-drill-2026-05-27.md` - local pass evidence. - #433 - W3d target and gate issue. Refs #433

codex added 1 commit

2026-05-27 11:34:58 +02:00

dr(w3): stage disposable VPS restore wrapper

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 5s

Details

canary-required / canary (pull_request) Has been skipped