VM130 orchestration source export scope Included seeds: - All regular files and symlinks below /opt/router-ops except excluded runtime/state directories and sensitive path patterns. - /usr/local/bin/router-* - /usr/local/sbin/router-* - /usr/local/lib/router-* - Resolved PATH commands: router-machine-close, router-run, router-step, access-map, when present. - Existing absolute dependencies referenced by collected text files, restricted to: /opt/router-ops /usr/local/bin /usr/local/sbin /usr/local/lib Excluded directory names: - public, work, cache, caches, archive, archives, backup, backups, rollback, rollbacks, log, logs, tmp, temp - run, runs, state, states, report, reports, artifact, artifacts, snapshot, snapshots - download, downloads, clone, clones, repo, repos, repository, repositories, mirror, mirrors - .git, .hg, .svn, .ssh, __pycache__, node_modules, venv, .venv - secrets, secret, credentials Excluded file patterns: - .env and .env.* - id_*, authorized_keys, known_hosts - *.key, *.pem, *.p12, *.pfx, *.kdbx - *.tar, *.tar.gz, *.tgz, *.zip, *.7z, *.xz, *.zst, *.iso, *.img, *.qcow2 - *.log, *.sqlite, *.sqlite3, *.db, *.dump Safety: - No SSH command is executed. - No Git command is executed. - No service is restarted. - No source file is modified. - A file beginning with a private-key PEM/OpenSSH marker causes STOP.