From e3d7a8f071d7b7d0cfe2e4ef9533d780822d7e5e Mon Sep 17 00:00:00 2001 From: Joseph Doherty Date: Fri, 11 Sep 2026 09:05:33 -0400 Subject: [PATCH] docs: note that psbridge and winrm remote access to the wonder boxes are disabled (2026-09-11) Claude-Session: https://claude.ai/code/session_01PpXxRCFznFqE65ay6wAJwe --- CLAUDE.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/CLAUDE.md b/CLAUDE.md index 6db06de6..a11fb574 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -83,6 +83,13 @@ feature branch since 2026-07-24 because it was committed onto the current checko index disagreed with reality for three days despite this rule. If you find index commits stranded on a feature branch, cherry-pick them onto `main` rather than merging that branch. +> ⛔ **Wonder box remote access (2026-09-11): no `psbridge`, no `winrm`.** Both skills are retired/disabled — +> the WinRM remote-exec channel set off the security software on the wonder boxes (vd03/vq03/vq04). Do not +> run remote commands (service control, publish/swap, PowerShell) on those boxes and do not stand up a +> replacement channel until the user clears one. Still allowed: UNC/SMB file copies and logging directly +> into the SQL Servers. Deploy steps that need a command on the box are blocked; see the umbrella +> [`../scadaproj/CLAUDE.md`](../scadaproj/CLAUDE.md) for the current hold. + ## Architecture Overview ### Data Flow