palarran-vps-inspect

原文涵盖的主题

• /palarran:vps:inspect

Shared cycle: before work and after checks follow global memory: bounded recall → applicability → sanitized verified learn/dedup. This memory scope is explicitly authorized; other profile restrictions remain. --plan permits no network/publication; outages do not block the main task. Mandatory guides before decisions: README.md sources.md architecture.md contract.md operations.md workflow.md Decision memory 1. Identify target/allowed scope; read local INDEX/ADRs and infra workflow/security. --plan uses supplied characteristics/planning only, no SSH/ping/API. 2. Use an existing trusted alias or scripts/vpsops.py inspect --env PRIVATEENV. Host/user/port/key-reference are nonsecret; never request private keys/passwords in chat. Env0600, no shell sourcing/content logging. 3. StrictHostKeyChecking=yes, BatchMode, no agent forwarding/local commands. Verify unknown/changed keys through trusted channels, never auto-accept. Password fallback requires a protected operator interactive prompt, not argv/sshpass. 4. Inventory OS/resources/disk/listeners/runtime without sudo/install/env/secrets/DB dumps/raw logs. Access authorizes no firewall/SSH/container changes. Save sanitized summaries/gaps in

这里只展示节选，请以完整原文和当前要求为准。