Contextra manual reboot checkpoint - 2026-09-30

Current environment: OFFICE. Keep office selected for this reboot test.
Field CA and AI-01 credentials are prepared separately, NOT activated.
No reboot, login or service restart was performed by this preparation.

1. Save editor files. From the si terminal, run:
   sudo reboot
   Do not force the power off. SSH disconnect is expected.

2. After the login screen returns, do NOT run ct start first.
   Check automatic startup:
   ct status
   ct auth status
   Send those outputs to the assistant. Do not send passwords or tokens.

3. If SSH is unavailable, use the physical console:
   ip -4 -br addr show enp128s31f6
   Current office address before reboot: 192.168.50.7
   SSH port: 1023
   If DHCP assigned a different address, use that address for SSH and report it.
   Runtime may intentionally refuse startup when its configured IP differs.

4. OFFICE ONLY: the Web101 neighbor exception is kernel-only.
   It disappears at reboot. No persistent ARP entry was installed.
   If Web connectivity fails, first check:
   ct net arp status
   Only for this verified office Web101 MAC, after confirming the mismatch:
   ct net arp set bc:24:11:8a:6e:f4
   Enter ARP when requested. Do not use this MAC on the closed field network.
   Manual neighbor recovery is not counted as fully automatic network recovery.

5. After service/WSS checks, test one camera manually and Stop it manually.
   Do not start multiple channels or rerun the performance tests.

FIELD LATER (not for this reboot):
AI 192.168.105.40/24; Web 192.168.105.42; media 192.168.105.41.
Field CA: /workspace/contextra/setup/profiles/field.private/main.ca.crt
Field credentials: /workspace/contextra/setup/profiles/field.private/main.credentials.json
Change credentials via ct profile credentials after explicitly selecting field.
Selecting a profile alone does NOT apply the NIC or Runtime configuration.
Use physical-console guidance for ct net apply, then prepare/connect/apply/start.
Ask the Web operator to confirm signing CA/key configuration and no stale bbox Redis override.
Do not cancel an issued session, repeatedly retry login, or generate a new CA to bypass errors.

PDF/gamebook preparation is deferred until the user requests it after the reboot test.