From c56512e135288c8a52092a3a90cf3dd5d68e24fa Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Tue, 30 Jun 2026 21:46:12 +0800
Subject: [PATCH] fix(cd): keep 110 recovery orchestrator on controlled profile

---
 .gitea/workflows/cd.yaml                         | 9 +++++++++
 ops/runner/test_cd_controlled_runtime_profile.py | 6 ++++++
 2 files changed, 15 insertions(+)

diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index 8d0d7ce3..88673ec6 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -510,6 +510,10 @@ jobs:
                 ;;
               scripts/ops/backup-health-textfile-exporter.py)
                 ;;
+              scripts/reboot-recovery/deploy-to-110.sh)
+                ;;
+              scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)
+                ;;
               scripts/reboot-recovery/dr-escrow-evidence-checklist.py)
                 ;;
               scripts/reboot-recovery/post-reboot-owner-response-preflight.py)
@@ -560,6 +564,8 @@ jobs:
                 ;;
               scripts/reboot-recovery/tests/test_harbor_watchdog_contract.py)
                 ;;
+              scripts/reboot-recovery/tests/test_recover_110_control_path_and_harbor_local.py)
+                ;;
               scripts/security/gitea-private-inventory-p0-scorecard.py)
                 ;;
               scripts/security/gitea-authenticated-inventory-payload-validator.py)
@@ -711,6 +717,8 @@ jobs:
             python3.11 -c "import yaml; yaml.safe_load(open('../../ops/monitoring/alerts-unified.yml')); print('alerts-unified YAML OK')"
             bash -n \
               ../../ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh \
+              ../../scripts/reboot-recovery/deploy-to-110.sh \
+              ../../scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh \
               ../../scripts/reboot-recovery/install-reboot-auto-recovery-slo-110.sh \
               ../../scripts/reboot-recovery/reboot-auto-recovery-host-probe.sh \
               ../../scripts/reboot-recovery/reboot-auto-recovery-slo-exporter.sh \
@@ -772,6 +780,7 @@ jobs:
               ../../scripts/reboot-recovery/tests/test_post_start_quick_check_contract.py \
               ../../scripts/reboot-recovery/tests/test_reboot_p0_operational_contract.py \
               ../../scripts/reboot-recovery/tests/test_harbor_watchdog_contract.py \
+              ../../scripts/reboot-recovery/tests/test_recover_110_control_path_and_harbor_local.py \
               ../../scripts/security/tests/test_gitea_private_inventory_p0_scorecard.py \
               ../../scripts/security/tests/test_gitea_authenticated_inventory_payload_validator.py \
               -v --tb=short -x -p no:cacheprovider \
diff --git a/ops/runner/test_cd_controlled_runtime_profile.py b/ops/runner/test_cd_controlled_runtime_profile.py
index 3b8dc72f..1782fae2 100644
--- a/ops/runner/test_cd_controlled_runtime_profile.py
+++ b/ops/runner/test_cd_controlled_runtime_profile.py
@@ -486,6 +486,8 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "ops/runner/test_check_awoooi_110_controlled_cd_lane_readiness.py)",
         "scripts/backup/gitea-repo-bundle-backup.sh)",
         "scripts/ops/backup-health-textfile-exporter.py)",
+        "scripts/reboot-recovery/deploy-to-110.sh)",
+        "scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)",
         "scripts/reboot-recovery/post-start-quick-check.sh)",
         "scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh)",
         "scripts/reboot-recovery/full-stack-cold-start-check.sh)",
@@ -498,10 +500,13 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py)",
         "scripts/reboot-recovery/tests/test_reboot_p0_operational_contract.py)",
         "scripts/reboot-recovery/tests/test_harbor_watchdog_contract.py)",
+        "scripts/reboot-recovery/tests/test_recover_110_control_path_and_harbor_local.py)",
         "../../scripts/ops/backup-health-textfile-exporter.py",
         "../../scripts/backup/gitea-repo-bundle-backup.sh",
         "../../ops/monitoring/alerts-unified.yml",
         "../../ops/runner/check-awoooi-110-controlled-cd-lane-readiness.sh",
+        "../../scripts/reboot-recovery/deploy-to-110.sh",
+        "../../scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh",
         "../../scripts/reboot-recovery/post-start-quick-check.sh",
         "../../scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh",
         "../../scripts/reboot-recovery/full-stack-cold-start-check.sh",
@@ -516,6 +521,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "../../scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py",
         "../../scripts/reboot-recovery/tests/test_reboot_p0_operational_contract.py",
         "../../scripts/reboot-recovery/tests/test_harbor_watchdog_contract.py",
+        "../../scripts/reboot-recovery/tests/test_recover_110_control_path_and_harbor_local.py",
         "../../ops/runner/test_check_awoooi_110_controlled_cd_lane_readiness.py",
     ]
     for source in expected_sources: