DERIOX GUARD M9.1

Real Pilot Preparation

Pregătire concretă pentru primul pilot real mini PC gateway. Fără camere încă. Fără stream. Fără producție. Scopul este să alegem ținta și să pregătim M9.2 — structura locală a agentului.

Preparation score90

Targets6

Ready targets0

Checks7

Commands4

Production0

M9.1 este preparation-only. Nu rulează agent real, nu trimite heartbeat real, nu face pairing real, nu scanează camere și nu activează producție. M9.2 va crea structura locală a agentului pe mini PC.

Dashboard Targets Checklist Dry-run Commands Audit API Status Mini PC API M8.20 Exit Guard Navigation

M9.1 Real Pilot Preparation

M9.1 starts the practical phase after M8. It prepares the first real mini PC gateway pilot without enabling real agent execution yet. The goal is to prepare target selection, safe dry-run commands, folder planning and checklist before M9.2 creates the local agent folder structure.

preparation_only=1 · real_started=0 · heartbeat=0 · pairing=0 · camera=0 · discovery=0 · stream=0 · metadata=1

ID	Check	Group	Status	Weight	Safety	Details
1	M8 foundation closed with FAILS 0 M901-CHECK-m8_closed	foundation	passed_metadata_only passed=1 · blocker=0	15	outbound=1 · real_later=1 · plain=0 · pass=0 · stream=0 · media=0 · noexec=1	M8.1–M8.20 must be stable before moving into the real mini PC pilot.
2	Pilot starts with one mini PC only M901-CHECK-single_mini_pc	scope	passed_metadata_only passed=1 · blocker=0	15	outbound=1 · real_later=1 · plain=0 · pass=0 · stream=0 · media=0 · noexec=1	The first real pilot should use one mini PC and one controlled site/client, not multiple locations.
3	No camera access in M9.1 M901-CHECK-no_cameras_yet	security	passed_metadata_only passed=1 · blocker=0	20	outbound=1 · real_later=1 · plain=0 · pass=0 · stream=0 · media=0 · noexec=1	M9.1 must not discover cameras, store camera passwords or open streams.
4	Gateway remains outbound-only M901-CHECK-outbound_only	network	passed_metadata_only passed=1 · blocker=0	15	outbound=1 · real_later=1 · plain=0 · pass=0 · stream=0 · media=0 · noexec=1	The mini PC should call guard.deriox.ro outbound; no inbound port exposure is required.
5	Manual Admin Deriox approval required M901-CHECK-manual_admin_approval	governance	passed_metadata_only passed=1 · blocker=0	15	outbound=1 · real_later=1 · plain=0 · pass=0 · stream=0 · media=0 · noexec=1	Pairing/activation remains controlled by Admin Deriox.
6	Only dry-run commands are exposed M901-CHECK-dry_run_commands	safety	passed_metadata_only passed=1 · blocker=0	10	outbound=1 · real_later=1 · plain=0 · pass=0 · stream=0 · media=0 · noexec=1	M9.1 exposes safe commands for inspection; real execution starts later.
7	M9.2 creates real local folder structure M901-CHECK-folder_plan_next	next_step	passed_metadata_only passed=1 · blocker=0	10	outbound=1 · real_later=1 · plain=0 · pass=0 · stream=0 · media=0 · noexec=1	The next package should prepare /opt/deriox-guard/agent or another selected mini PC path.