From f2e0861709a5b817c10090bd934198c41d488ae7 Mon Sep 17 00:00:00 2001
From: Joseph Doherty <dohejw01@gmail.com>
Date: Fri, 11 Sep 2026 09:05:35 -0400
Subject: [PATCH] docs: note that psbridge and winrm remote access to the
 wonder boxes are disabled (2026-09-11)

Claude-Session: https://claude.ai/code/session_01PpXxRCFznFqE65ay6wAJwe
---
 CLAUDE.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/CLAUDE.md b/CLAUDE.md
index 9b5f091..d3c2dfb 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -55,6 +55,13 @@ per-project narrative in `../scadaproj/.claude/skills/sister-project-history/<pr
 (create `mxaccessgateway.md` there if this gateway ever needs one) and shared-library history
 in `../scadaproj/<lib>/CLAUDE.md`.
 
+> ⛔ **Wonder box remote access (2026-09-11): no `psbridge`, no `winrm`.** Both skills are retired/disabled —
+> the WinRM remote-exec channel set off the security software on the wonder boxes (vd03/vq03/vq04). Do not
+> run remote commands (service control, publish/swap, PowerShell) on those boxes and do not stand up a
+> replacement channel until the user clears one. Still allowed: UNC/SMB file copies and logging directly
+> into the SQL Servers. Deploy steps that need a command on the box are blocked; see the umbrella
+> [`../scadaproj/CLAUDE.md`](../scadaproj/CLAUDE.md) for the current hold.
+
 ## Build, Test, Run
 
 ```powershell