Low-Context Execution Packet

Use branch stage/d3-01-surveillance-probe.

Access probes, in order:

tailscale status | rg 'knulli|100.119.202.114'
ssh -vvv -o BatchMode=yes -o ConnectTimeout=8 root@100.119.202.114 true
nc -vz -w 3 100.119.202.114 22
ssh mehdifarah@100.120.38.37 'tailscale status | grep -i knulli || true'

If SSH still fails, document the failure and try alternate access already known to this project: direct LAN/hotspot IPs in older notes, KNULLI file shares, or Commander-provided local shell. Do not block the whole stage on SSH if framebuffer/log access can be reached another way.

Once shell access exists, record:

uname -a
mount
ps w
find /dev -maxdepth 2 \( -name 'fb*' -o -name 'event*' -o -name 'uinput' \) -print
find /media /userdata /storage /tmp -maxdepth 4 -iname '*retroarch*' -o -iname '*flycast*' 2>/dev/null | head -200

Screenshot paths to try, stopping at the first working path:

fbgrab /tmp/d3-screen.png
ffmpeg -y -f fbdev -i /dev/fb0 -frames:v 1 /tmp/d3-screen.png
dd if=/dev/fb0 of=/tmp/d3-fb0.raw bs=4M count=8

Recording paths to try:

ffmpeg -y -f fbdev -framerate 30 -i /dev/fb0 -t 5 /tmp/d3-screen.mp4

Telemetry paths to try:

ps w | rg -i 'retroarch|flycast|emulator|dreamcast'
find /var/log /tmp /media /userdata /storage -type f \( -iname '*retroarch*log*' -o -iname '*flycast*log*' \) 2>/dev/null
tail -F <log-path>

Input injection paths to try:

cat /proc/bus/input/devices
evtest --query /dev/input/eventX EV_KEY BTN_START
evemu-event /dev/input/eventX --type EV_KEY --code BTN_START --value 1 --sync
evemu-event /dev/input/eventX --type EV_KEY --code BTN_START --value 0 --sync

If evtest or evemu are missing, document whether KNULLI allows installing them, copying static binaries, or using RetroArch network commands instead.

docs/KNULLI_SURVEILLANCE_PROTOCOL.md must contain: