From 6a2e4d5f5de43d22f5e2bd696b5df1207ad1e307 Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Tue, 30 Jun 2026 18:21:56 +0800
Subject: [PATCH] fix(recovery): detect all-host reboot recovery gaps

---
 .../reboot-recovery/install-reboot-auto-recovery-slo-110.sh | 6 +++++-
 .../tests/test_reboot_auto_recovery_slo_installer.py        | 4 ++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh b/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh
index a8e0741f..f17eb821 100644
--- a/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh
+++ b/scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh
@@ -209,7 +209,10 @@ create_payload() {
     --exclude='.pytest_cache' \
     -czf "$tarball" \
     scripts/reboot-recovery \
-    scripts/security
+    scripts/security \
+    ops/maintenance \
+    ops/monitoring \
+    docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
 }
 
 print_plan
@@ -219,6 +222,7 @@ case "$MODE" in
     cat <<DRYRUN
 DRY_RUN=1
 would_create_tarball_from=$ROOT_DIR/scripts/reboot-recovery,$ROOT_DIR/scripts/security
+would_include_source_gates=$ROOT_DIR/ops/maintenance,$ROOT_DIR/ops/monitoring,$ROOT_DIR/docs/runbooks/PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md
 would_copy_tarball_to=$HOST:$REMOTE_TARBALL
 would_enable_timer=${UNIT_NAME}.timer
 would_start_service_once=$RUN_ONCE
diff --git a/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py b/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py
index 338b44b0..3997f4c5 100644
--- a/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py
+++ b/scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py
@@ -23,6 +23,7 @@ def test_installer_dry_run_exposes_apply_rollback_and_verify_contract() -> None:
     assert "target_selector=host_110_systemd_timer:awoooi-reboot-auto-recovery-slo.timer" in result.stdout
     assert "rollback_command=bash scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh --rollback" in result.stdout
     assert "verify_command=bash scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh --verify-only" in result.stdout
+    assert "would_include_source_gates=" in result.stdout
     assert "would_enable_timer=awoooi-reboot-auto-recovery-slo.timer" in result.stdout
 
 
@@ -55,6 +56,9 @@ def test_installer_is_limited_to_verifier_timer_not_product_restarts() -> None:
     assert "systemctl start ${UNIT_NAME}.service" in text
     assert 'payload_dir="$(mktemp -d "${TMPDIR:-/tmp}/${UNIT_NAME}.XXXXXX")"' in text
     assert 'payload="${payload_dir}/payload.tar.gz"' in text
+    assert "ops/maintenance" in text
+    assert "ops/monitoring" in text
+    assert "PUBLIC-MAINTENANCE-FALLBACK-RUNBOOK.md" in text
 
 
 def test_service_uses_deployed_source_root_and_bounded_oneshot() -> None: