get_config_remote.read: SSH no-cli (empty cli; url/status vs MOPS)

[AdamRickards]

SSH remainder (Σ Execute 2026-09-23)

Method: get_config_remote · main 2c65702.

Receipt: ssh ok n=2; cli=[].

Bucket: no-cli. url empty vs MOPS set; status shape miss. No invent. No #92.

[AdamRickards]

Architect trail (2026-09-23)

• Hole: Schema / SSH — no-cli (empty or protocol-absent). Rank1 = find declared show(s) / Media CLI that populate cli without inventing values.
• Order: CLI.json + sibling overlays → Schema PR → Test re-inspect. Fanout lessons from get_vlans.read: SSH close-format (port membership vs MOPS) #290/fix(wire): SSH get_vlans Rank1v2 PVID membership via show vlan port (#290) #303 apply (timeout = HARD stop that path).
• Named proof: python3 tests/release_matrix.py --inspect --method <this> --protocol ssh --trace on tip 6a9ac64+.
• Provenance: cell stays untested until green. No invent; SSH cli hangs to timeout on invalid or missing command instead of failing #92 closed.
• Owner: Schema clerk. NO_HOLE → Architect parks Engine (do not widget-wait).

[AdamRickards]

Decision trail (Schema clerk)

• Flow: soft assign get_config_remote.read SSH no-cli on tip 4f5fe0d+ (rebased on cd1e3cb / docs(agents): park #324 SSH get_config execute-blob Engine NO_HOLE #348 park). Receipt: ssh ok n=2; cli=[]; url empty vs MOPS set; status shape miss. Architect: Schema Rank1 = find declared show(s) / Media CLI that populate cli without inventing values. No invent. No SSH cli hangs to timeout on invalid or missing command instead of failing #92. Fanout call-timeout HARD (get_vlans.read: SSH close-format (port membership vs MOPS) #290/fix(wire): SSH get_vlans Rank1v2 PVID membership via show vlan port (#290) #303).
• Method / Rank1: get_config_remote. Rank1 = CLI.json + sibling overlays → Schema PR → Test re-inspect.
• 1.17 / catalogue: API_REFERENCE: Protocols: None (Composed) for getter surface; attrs bind url→hm2fmconfigremotesavedestination, status→hm2fmconfigremotesaveadminstatus (filemgmt). Base wire has MOPS/SNMP only — 0 SSH sources before this hop. Sibling wire/ssh/filemgmt.yaml already covers profiles/status/watchdog — not remotesave.
• CLI.json hit: show config remote-backup (cli_ref §10.6.9). Field labels from archive CLI capture (local/archive/tests/unit/test_get_config_remote.py + local/archive/config.yaml): Remote backup, Destination URL (not invented). Username show exists but not in getter attrs.
• Ruled out: (1) NO_HOLE / Engine park — unlike get_config.read: SSH no-cli (empty cli vs MOPS) #324, MIB wires + CLI show exist; hang was missing overlay, not execute-blob. (2) Invent floors / change gold status: idle — floors stay Test-owned; shape leftover noted. (3) Fanout / extra shows — single show covers both attrs. (4) Reopen SSH cli hangs to timeout on invalid or missing command instead of failing #92 / --gate / lab identity — no.
• Tool: validate_schemas.py --errors → 0 errors (1 pre-existing warning). No live sidecar this hop (no-cli declare-first).
• Change: PR fix(wire): SSH get_config_remote from show config remote-backup (#325) #349 — wire/ssh/filemgmt.yaml SSH reads for remotesave adminstatus + destination.
• End: Rank1 YAML fix filed. Leftover for Test: re-inspect SSH cli + url vs MOPS; status bool/enabled vs schema default idle if still shape-miss. Soft Σ SSH no-cli continue elsewhere. Do not start get_devsec_status.read: SSH no-cli (empty cli vs MOPS) #326.

[AdamRickards]

WHERE — Tip Test re-inspect #325 / PR #349

Command: sidecar POST /v1/run get_config_remote.read trace:true (named proof equivalent)
Tree/SHA: tip 461ae4f (sidecar synced op=pr #349)
Verdict: pass on scoped expect (merge-ready soft). Honest leftover on status shape — do not invent-green.

Expect checks:

• cli includes show config remote-backup — present (not empty)
• url / Destination URL populated vs MOPS when set — match (same tftp template; identity redacted)
• status shape leftover OK — observed: mops/snmp False (bool) vs ssh 'idle' (schema string)

Receipt:

• ssh status=ok
• keys match: status, url
• parity_diffs n=2: both status (mops vs ssh, snmp vs ssh) — expected leftover per Architect note
• url eq across mops/ssh

Leftovers: status bool/enabled-style False vs schema idle — leave open; no invent-green.

No invent; #92 stays closed. Proof only.

[AdamRickards]

Architect — Test receipt + merge

PR #349 merged (tip on main after merge).

• Green: cli=show config remote-backup; url matches MOPS
• Leftover open: status mops/snmp bool False vs ssh 'idle' (parity n=2) — no invent-green. Cell stays ssh=untested until Rank1v2 map or HITL accepts.
• Optional soft: Schema Rank1v2 value_map idle→false if existing tools fit; otherwise leave open.
• No invent. SSH cli hangs to timeout on invalid or missing command instead of failing #92 closed.