---
name: sysop-kernel
description: >-
  WSL2 system health checks and Windows-specific hardening operator kernel for
  SYSopGPTWSL: run a repeatable sysop pipeline (preflight, WSL healthcheck,
  drift check, Windows snapshot via PowerShell, perf bench), produce a diffable
  report, and append evidence to `learn/LEDGER.md`. Use for sysop/health checks,
  drift/baseline verification, or when debugging Windows/WSL interop pitfalls
  (UNC cwd, UTF-8 BOM in PowerShell JSON, `/mnt/c` performance) and for
  Windows-side hardening/performance signals (power plan, power throttling,
  storage/volume inventory, WSL status/version). Use Plan-first execution and
  explicit verification reporting.
short-description: WSL2 sysop health/drift/baseline checks
triggers:
  - sysop
  - system check
  - health check
  - drift check
  - baseline
version: 1.0.0
codex-version: ">=0.76.0"
metadata:
  short-description: Run sysop operator kernel
---

# SYSop Operator Kernel

Follow `AGENTS.md` (Plan-first; worktrees per task when parallel; verification required; auditable notes).

## Plan mode (no writes yet)
1) Read `AGENTS.md`, then `sysop/README_INDEX.md` (index-first).
2) Restate the operator goal (health/drift/snapshot/bench/report).
3) Define “done means…”:
   - fresh artifacts under `sysop/out/` (at least `sysop/out/report.md`)
   - if `./sysop/run.sh` is executed: a new entry appended to `learn/LEDGER.md`
4) Hypotheses (when something fails):
   - Windows interop unavailable (for example `powershell.exe`/vsock errors)
   - UNC cwd issues (Windows commands must run from `/mnt/c`)
   - `systemctl` bus blocked in the Codex runner (expected)
5) Minimal evidence (read-only) to gather as needed:
   - `./sysop/preflight.sh`
   - `./sysop/healthcheck.sh`
   - `command -v powershell.exe || command -v pwsh.exe` (if Windows snapshot is requested)
6) Propose the exact `./sysop/run.sh ...` command(s) and STOP for approval:
   - `./sysop/run.sh all` (writes under `sysop/out/` and appends to `learn/LEDGER.md`)
   - Optional (repo-scoped auto-fix + script generation): `./sysop/run.sh all --apply-fixes`

## Execution mode (after approval)
- Run the approved `./sysop/run.sh ...` command(s) from repo root.
- Return results using the repo output format (see `AGENTS.md`), including:
  - report path: `sysop/out/report.md`
  - “Top bottlenecks” excerpt (if present)
  - latest `learn/LEDGER.md` excerpt (3–8 lines)

## Safety
- No destructive ops (`rm -rf`, `git reset --hard`, `git clean -fdx`).
- No writes outside the repo or to `/etc`.
- No internet fetches.

For details and rationale, see `references/OPERATOR_KERNEL.md`.