Setup and Maintenance Restore Doctor 20260727

Overview

This net-new draft implements the 2026-07-27 Merlin priority for Setup and Maintenance Doctor. Its stdlib-first analyzer reviews these evidence signals: host baseline, runtime version, dependency lock, container state, port map, permission check, configuration digest, service health, log evidence, backup inventory, restore test, smoke test, rollback trigger, owner signoff.

It is advisory and read-only. It does not perform remediation, discover private data, call networks, control services, or mutate files. It does not certify a downstream release, security, listing, package, or production state.

When to Use

• Before acting on redacted local notes containing host, runtime, dependency, container, port, permission, config-digest, health, backup, restore, smoke, rollback, and owner evidence.
• When a reproducible PASS, REVIEW, BLOCKED, or ERROR evidence-gap report is needed.
• To prepare clean, risky, missing, guarded-path, and oversized-input cases for independent Viper QA.

Do not use it to install, repair, restart processes, invoke shells, call networks, alter configuration, schedule work, deploy, publish, or create products.

Safety Contract

• Reads only direct --text or one explicitly supplied local notes file.
• Refuses hidden or sensitive-looking paths, symlinks, non-files, and inputs over 200,000 characters.
• Uses Python standard-library modules only and always reports mutated_files: [].
• Local PASS is advisory and is not independent approval or authorization to remediate.

Main Script

scripts/setup_maintenance_restore_doctor.py supports --notes, --text, --self-test, and --json.

Operator Workflow

1. Prepare redacted evidence notes. Complete when no secrets or private personal data are present.

2. Run python3 scripts/setup_maintenance_restore_doctor.py --notes notes.txt --json. Complete when structured output is returned and source content is unchanged.

3. Assign every finding to an owner or explicit deferral. Complete when no finding is silently ignored.

4. Hand unchanged artifacts and local evidence to Viper. Complete while status remains PENDING_VIPER.

Result Semantics

• PASS: at least nine expected signals and no risk signal.
• REVIEW: partial evidence or one bounded concern.
• BLOCKED: at least two risks or evidence score below 25.
• ERROR: missing, guarded, oversized, or unreadable input.

Test Scenarios

• Complete evidence should produce PASS.
• Runtime, dependency, port, permission, configuration, service, restore, or smoke failure evidence should produce BLOCKED when at least two risk phrases are present.
• Missing input should return ERROR with missing_notes.
• Hidden, sensitive-looking, symlinked, directory, and oversized inputs should be refused without mutation.

Common Pitfalls

1. Treating local analyzer PASS as independent approval.

2. Supplying secret values instead of redacted evidence references.

3. Mistaking recommendations for authorized remediation.

4. Omitting ownership, reviewer, restore, or rollback evidence.

Verification Checklist

• [ ] python3 -m py_compile scripts/setup_maintenance_restore_doctor.py exits 0 with isolated bytecode output.
• [ ] Two --self-test --json runs are byte-for-byte identical.
• [ ] Self-test returns ok=true, clean=PASS, risky=BLOCKED, and mutated_files=[].
• [ ] Input guards and repository security/static checks pass.
• [ ] Draft remains PENDING_VIPER.

Draft Status

PENDING_VIPER — Iceman build evidence is not an independent downstream verdict.