Files
ops-bridge/registry/capabilities/capability.ops.tunnel-bridge.md
tegwick 88612ab698 Draft capability entry (reuse-surface REUSE-WP-0017-T04, cohort 3)
Honest first-pass maturity vector grounded in README/docs/tests present
in this repo; no invented evidence. Flagged for human review before
publish. See reuse-surface history/2026-07-06-coverage-classification.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-06 19:50:53 +02:00

123 lines
4.1 KiB
Markdown

---
id: capability.ops.tunnel-bridge
name: SSH Reverse Tunnel Lifecycle Manager (ops-bridge)
summary: CLI that manages named SSH reverse tunnels keeping remote execution environments connected to
the local Custodian State Hub, with auto-reconnect, health checks, and structured audit events.
owner: ops-bridge
status: draft
domain: infotech
tags:
- ssh
- tunnel
- ops
- connectivity
maturity:
discovery:
current: D3
target: D5
confidence: medium
rationale: README.txt documents named tunnels, auto-reconnect with exponential backoff, HTTP health
checks, and structured JSON audit events per tunnel; this is also the tool underlying reuse-surface's
own `/bridge` skill.
availability:
current: A2
target: A3
confidence: medium
rationale: Ships a `bridge` CLI, installable via pyproject; already actively used to keep remote Claude
Code sessions (COULOMBCORE, Railiance nodes) connected to the State Hub MCP.
external_evidence:
completeness:
level: C2
confidence: low
basis: scope_vs_intent_and_consumer_expectations
satisfied_expectations:
- auto-reconnecting named SSH reverse tunnels
- HTTP health checks confirming forwarded service reachability, not just SSH liveness
- structured audit event log per tunnel
broken_expectations: []
out_of_scope_expectations: []
reliability:
level: R1
confidence: low
basis: consumer_quality_signals
known_reliability_risks:
- operational tool with real production usage but no independent load/failure testing recorded in
this sweep
discovery:
intent: Keep remote execution environments' MCP connectivity to the local State Hub alive and observable
via managed, auto-reconnecting SSH reverse tunnels.
includes:
- named SSH reverse tunnel lifecycle management
- auto-reconnect with exponential backoff
- HTTP health checks
- structured audit event logging
excludes:
- the State Hub or MCP servers themselves (bridge only manages connectivity)
assumptions: []
use_cases: []
research_memos: []
availability:
current_level: A2
target_level: A3
current_artifacts:
- '`bridge` CLI'
target_artifacts: []
consumption_modes:
- cli
relations:
depends_on: []
supports: []
related_to: []
evidence:
documentation:
- README.txt
tests:
- tests/
consumer_feedback: []
bug_reports: []
incidents: []
consumer_guidance:
recommended_for:
- any workstation/remote-machine pair needing durable SSH-tunneled MCP or service connectivity
not_recommended_for:
- needs for tunnel types other than SSH reverse port-forwards
known_limitations:
- no independent load/failure testing recorded beyond production usage observations
promotion_history: []
---
# SSH Reverse Tunnel Lifecycle Manager (ops-bridge)
## Overview
`ops-bridge` is an SSH reverse tunnel lifecycle manager: a `bridge` CLI that keeps remote execution environments (COULOMBCORE, Railiance nodes) connected to the local Custodian State Hub, with auto-reconnect, health checks, and structured audit logging per tunnel.
## Assessment notes
### Discovery
README.txt documents named tunnels, auto-reconnect with exponential backoff, HTTP health checks, and structured JSON audit events per tunnel; this is also the tool underlying reuse-surface's own `/bridge` skill.
### Availability
Ships a `bridge` CLI, installable via pyproject; already actively used to keep remote Claude Code sessions (COULOMBCORE, Railiance nodes) connected to the State Hub MCP.
### Completeness
First-pass honest assessment from the REUSE-WP-0017 coverage campaign
(reuse-surface). No external consumer feedback exists yet; levels reflect
scope-vs-intent documentation quality, not internal code quality.
### Reliability
No production consumer telemetry exists yet; reliability level is
intentionally conservative pending REUSE-WP-0019 reuse-telemetry evidence.
## Promotion checklist
- [x] ID follows `capability.<domain>.<name>` pattern
- [x] Maturity enums match `specs/CapabilityMaturityStandard.md`
- [x] `external_evidence` is populated separately from `maturity`
- [ ] Relations reference valid capability IDs (none yet)
- [x] Index entry added in `registry/indexes/capabilities.yaml`