{
  "schema_version": 1,
  "plan_id": "agentmeshos-detachment",
  "plan_file": "docs/plans/agentmeshos-detachment-plan.md",
  "status": "进行中",
  "objective": "完成 AgentMeshOS 从 RR 到 101 的系统剥离：由 101 继承项目代码权威、资料管理、GitHub 同步、CI/CD 构建与发布协调和项目级运维入口；RR 脱离项目控制面但保留权限、凭据、生产 Runtime/Bridge、生产部署、审计和回滚能力，最终通过全链路稳定性验收。",
  "objective_source": "docs/plans/agentmeshos-detachment-plan.md#1总体目标",
  "current_goal": "DETACH-05",
  "current_goal_title": "RR 生产部署节点固化",
  "current_goal_status": "调查中",
  "current_work_package": "持续推进 DETACH-05：非生产正确下载/摘要、错误域名与错误摘要拒绝、失败清理、健康和审计已通过；目录分享下的 RR 文件级接收烟测已通过，下一步使用同一机制完成版本化产物接收、部署与回滚，再推进备份交接、控制链路停用、文档更新和最终稳定性验收。OAuth 分支不作为前置条件，不改现网 SSH/SCP 链路、不修改 101-project同步-03",
  "current_goal_rule": "current_goal 仅表示当前推进目标；DETACH-01 至 DETACH-09 全部为实际目标并持续登记，不将阶段性目标冒充总体目标。",
  "execution_mode": "目标模式",
  "updated_at": "2026-08-29T11:03:04Z",
  "goals": [
    {"id":"DETACH-01","title":"RR/101/MM/DD 现场基线","status":"已完成","objective":"用现场证据建立四节点职责、服务调用、凭据元数据、备份边界和 RR→101 差异基线","deliverables":["节点职责矩阵","服务调用关系","凭据保留清单","备份分类清单","RR→101 差异清单","风险与禁止操作清单"],"acceptance":"每项结论有现场证据；凭据值不被读取、输出或写入文档；未知项明确标注","depends_on":[],"plan_anchor":"#detach-01rr101mmdd-现场基线","evidence_path":"docs/plans/agentmeshos-detachment-baseline.md","evidence_updates":["RR/101 存储边界与 Bridge 调用关系","RR 历史备份逐对象类型与恢复边界分类","101 WebDAV 写入/回读/删除双重探针","MM/DD SSH 角色与公网健康证据","RR/101 文档冲突复核版清单","RR 代表性恢复材料隔离 quick_check 与归档可读性","DETACH-01 六项交付物验收审计"],"remaining_work":["将冲突清单映射到 DETACH-08 文档变更项","跨主机恢复材料交接属于 DETACH-06，不是本目标遗留"],"next_goal":"DETACH-02"},
    {"id":"DETACH-02","title":"101 项目控制、GitHub/CI/CD 与 RR 生产发布协调","status":"调查中","objective":"由 101 维护代码与资料权威、GitHub 同步及 CI/CD 构建发布；RR 保留生产 Runtime、System Operations Bridge 和生产部署运行能力","deliverables":["101 项目控制职责证据","GitHub Actions 流程与成功记录","版本化产物及 SHA-256 摘要","101→RR 发布/回滚请求记录","RR Bridge 保留与本机 Runtime 调用证据"],"acceptance":"CI/CD 默认路径可测试、构建并产出可验证版本；RR 仅接收已发布带摘要产物；人工应急发布复用同一产物并审计；不建立第二 Runtime/Bridge，不复制 RR 凭据","depends_on":["DETACH-01"],"plan_anchor":"#detach-02101-项目控制githubcicd与rr生产发布协调","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-02/","evidence_updates":["RR Bridge 白名单、认证、监听和审计调查","101 同源代码与部署脚本核对","101 项目工作区、GitHub 和现有 CI 检查","方案 C 职责边界与发布链路决策","GitHub Actions 构建、摘要、发布记录","RR 生产 Runtime/Bridge 保留与本机调用证据","不执行第二 Bridge、旁路 Runtime 或凭据复制"],"remaining_work":["补齐 CI/CD 默认发布与人工应急回退的正式验收","完成版本产物、摘要、发布请求、回滚和 RR 健康复核证据","101 误部署 Bridge 保持停用；删除仅在 DETACH-09 最终清理门评估，不能提前删除凭据、审计库或回滚材料"],"next_goal":"DETACH-03"},
    {"id":"DETACH-03","title":"AgentMeshOS-WebDAV 功能与凭据继承","status":"已完成","objective":"让 101 继承系统 WebDAV 目录语义、受限凭据和对象生命周期能力","deliverables":["目录权限证据","凭据元数据证据","对象生命周期验收"],"acceptance":"根目录、临时、长期和 runtime-artifacts 可按边界使用；RR 必要凭据保留","depends_on":["DETACH-02"],"plan_anchor":"#detach-03agentmeshos-webdav-功能与凭据继承","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-03/README.md","evidence_updates":["101 系统 WebDAV 配置字段和 root-only 权限核对","根/临时/长期目录 PROPFIND 207","临时对象 PUT 201、回读哈希、DELETE 204、删除后 404","首次上传方式兼容性失败与正式方式复测记录","runtime-artifacts 只读访问与长期对象不自动删除策略核对","RR 必要生产凭据 root-only 保留对账"],"remaining_work":["凭据生成或轮换仅在独立、经批准的部署或安全变更中执行","DETACH-09 最终清理门复核双端凭据、审计和恢复材料保留清单"],"next_goal":"DETACH-04"},
    {"id":"DETACH-04","title":"101 项目统一项目入口与发布协调","status":"调查中","objective":"使 101 成为项目工作区、项目控制、GitHub/CI/CD 发布协调和节点运维的唯一项目入口","deliverables":["入口职责证据","系统 Codex 边界证据","GitHub/CI/CD 发布边界证据","同步任务接口边界"],"acceptance":"项目控制和发布协调从 101 发起可追踪；不修改 101-project同步-03；系统 Codex 不依赖项目节点网络","depends_on":["DETACH-03"],"plan_anchor":"#detach-04101-项目统一项目入口与发布协调","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-04/README.md","evidence_updates":["101 本机工作区、GitHub origin 和 Docs CI 成功记录","九个 GitHub Actions 构建工作流及 push/workflow_dispatch 入口","物理默认路由、主机 DNS、Tailnet 不接收 DNS/路由和 GitHub HTTPS 连通性","Project 旧 systemd 单元 masked 的只读核对与 101-project同步-03 接口边界"],"remaining_work":["取得 101-project同步-03 对现行同步控制器、健康和恢复证据的交接摘要，仅作接口引用","补齐一条 101→GitHub Actions→带摘要产物→RR 接收记录的正式发布协调证据；与 DETACH-02 共用，不建立第二生产链路"],"next_goal":"DETACH-05"},
    {"id":"DETACH-05","title":"RR 生产部署节点固化","status":"调查中","objective":"保留 RR 生产部署、运行载荷、凭据、审计和回滚能力并确认四个脚本归属","deliverables":["脚本调用关系","生产部署验收","回滚证据"],"acceptance":"RR 可接收并部署版本化产物；四脚本用途和保留/替代关系明确；不得无证据删除","depends_on":["DETACH-01"],"plan_anchor":"#detach-05rr-生产部署节点固化","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-05/README.md","evidence_updates":["RR Docker、Nomad、正式 Bridge active/enabled 与私有监听核对","四个 project-runtime 脚本的 root-only 元数据、用途和历史 release 哈希一致性","RR /backup 为系统盘的恢复边界核对","发现 Bridge 节点部署经 SSH/SCP 传送脚本，与当前传输边界冲突","受控公网分发选型：Cloudreve HTTPS、版本清单与 SHA-256；尚未实施迁移","Cloudreve 4.18.0 OAuth 表单现场核对：未提供 Files.Write/Shares.Write，未创建客户端","截图与 101 配置核对：AgentMeshOS-WebDAV 账号具备 AgentMeshOS-WebDAV 目录读写权限","101 WebDAV 非生产探针：PROPFIND 207、PUT 201、SHA-256 回读一致、DELETE 204、删除后 404","RR 只读健康复核：Docs health、node-metrics --check、Nomad status、Bridge active/enabled 均通过；未执行写操作","CI Docs 候选版本 sha-88e563c 与 OCI digest 已登记；隔离发布清单 WebDAV 上传、回读、删除验收通过，尚未上传镜像或部署","GitHub 9 个构建工作流和零个仓库 Secret 的发布边界核对"],"remaining_work":["完成隔离目标的错误摘要拒绝、失败清理、健康和审计验收","完成带版本清单和 SHA-256 的 RR 接收/部署/健康复核/回滚证据，与 DETACH-02 共用","若需要创建公开分享，另行验证管理 API 权限并取得安全批准；不把 WebDAV 权限误判为 OAuth 或管理员权限","核验四类操作的健康、审计和回滚路径；不得无证据删除脚本或历史 release","跟踪 Nomad keepalive 超时及 pcdell-103 过期 introduction token 告警；不在本目标内修改 101-project同步-03"],"next_goal":"DETACH-06"},
    {"id":"DETACH-06","title":"历史备份与恢复材料交接","status":"调查中","objective":"分类 RR 历史备份并把必要恢复材料安全继承到 101 独立备份边界","deliverables":["备份分类","恢复材料清单","权限/哈希校验","恢复演练记录"],"acceptance":"RR 原件保留；101 材料可读、权限正确且恢复路径可执行；不因分类直接删除","depends_on":["DETACH-05"],"plan_anchor":"#detach-06历史备份与恢复材料交接","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-06/","evidence_updates":["RR /backup 位于系统盘 /dev/vda2，101 /srv/codex-hub-backup 位于独立盘 /dev/sda1","RR Runtime、Nomad/PKI、OmniRoute、网络和重启恢复材料分类完成；原件保留，不读取凭据值","代表性 Runtime 数据库隔离复制 quick_check=ok、0600 权限和退出清理通过；101 最新备份清单可读且 0600"],"remaining_work":["生成 RR→101 恢复材料交接清单并写入独立备份盘","选择并交接必要的非敏感恢复材料后复核哈希、权限和可读性","DETACH-09 最终清理门复核双端凭据、审计和恢复材料保留清单"],"next_goal":"DETACH-07"},
    {"id":"DETACH-07","title":"RR 项目控制链路停用","status":"未开始","objective":"在全部交接验收后切换到 101 并停用 RR 项目控制入口，同时保留生产恢复能力","deliverables":["切换记录","停用前后快照","恢复路径","停用后验收"],"acceptance":"RR 不再承载项目控制；生产、权限、凭据、审计和回滚不受影响","depends_on":["DETACH-02","DETACH-03","DETACH-04","DETACH-05","DETACH-06"],"plan_anchor":"#detach-07rr-项目控制链路停用","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-07/","next_goal":"DETACH-08"},
    {"id":"DETACH-08","title":"架构、权限、节点和运维文档更新","status":"未开始","objective":"使架构、部署、运维和交接文档准确反映 RR 脱离与 101 继承后的现场状态","deliverables":["架构更新","权限矩阵","节点定位更新","运维流程更新"],"acceptance":"文档、配置和现场运行状态三方一致；旧控制面描述被标记或修正","depends_on":["DETACH-07"],"plan_anchor":"#detach-08架构权限节点和运维文档更新","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-08/","next_goal":"DETACH-09"},
    {"id":"DETACH-09","title":"重启、故障、回滚与最终归档","status":"未开始","objective":"证明剥离后的系统在重启、单节点故障和回滚场景下仍连续可恢复，并完成远端归档","deliverables":["稳定性验收","故障切换证据","回滚入口","最终剥离记录","GitHub/CI 证据"],"acceptance":"两端重启恢复、单端不可用连续性、凭据/审计、公网链路和 CI 全部通过","depends_on":["DETACH-08"],"plan_anchor":"#detach-09重启故障回滚与最终归档","evidence_path":"docs/plans/agentmeshos-detachment-evidence/DETACH-09/","next_goal":null}
  ]
}