fix(cd): keep cold-start source recovery on controlled profile

.gitea/workflows/cd.yaml

@@ -572,8 +572,14 @@ jobs:
                 ;;
               scripts/reboot-recovery/full-stack-cold-start-check.sh)
                 ;;
+              scripts/reboot-recovery/cold-start-textfile-exporter.sh)
+                ;;
+              scripts/reboot-recovery/install-cold-start-monitor-110.sh)
+                ;;
               scripts/reboot-recovery/momo-drive-token-source-recovery-preflight.sh)
                 ;;
+              scripts/reboot-recovery/momo-source-arrival-gate.py)
+                ;;
               scripts/reboot-recovery/full-stack-recovery-scorecard.sh)
                 ;;
               scripts/reboot-recovery/harbor-watchdog.sh)
@@ -590,6 +596,8 @@ jobs:
                 ;;
               scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py)
                 ;;
+              scripts/reboot-recovery/tests/test_momo_source_arrival_gate.py)
+                ;;
               scripts/reboot-recovery/awoooi-reboot-auto-recovery-slo.service)
                 ;;
               scripts/reboot-recovery/awoooi-reboot-auto-recovery-slo.timer)
@@ -763,6 +771,7 @@ jobs:
             python3.11 -m py_compile \
               ../../scripts/reboot-recovery/dr-escrow-evidence-checklist.py \
               ../../scripts/reboot-recovery/post-reboot-owner-response-preflight.py \
+              ../../scripts/reboot-recovery/momo-source-arrival-gate.py \
               ../../scripts/reboot-recovery/reboot-auto-recovery-slo-scorecard.py \
               ../../scripts/ops/backup-health-textfile-exporter.py \
               ../../scripts/security/gitea-private-inventory-p0-scorecard.py \
@@ -782,6 +791,8 @@ jobs:
               ../../scripts/reboot-recovery/post-start-quick-check.sh \
               ../../scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh \
               ../../scripts/reboot-recovery/full-stack-cold-start-check.sh \
+              ../../scripts/reboot-recovery/cold-start-textfile-exporter.sh \
+              ../../scripts/reboot-recovery/install-cold-start-monitor-110.sh \
               ../../scripts/reboot-recovery/momo-drive-token-source-recovery-preflight.sh \
               ../../scripts/reboot-recovery/full-stack-recovery-scorecard.sh \
               ../../scripts/reboot-recovery/harbor-watchdog.sh \
@@ -839,6 +850,7 @@ jobs:
               ../../scripts/ops/tests/test_backup_health_textfile_exporter.py \
               ../../scripts/reboot-recovery/tests/test_dr_escrow_evidence_checklist.py \
               ../../scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py \
+              ../../scripts/reboot-recovery/tests/test_momo_source_arrival_gate.py \
               ../../scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_installer.py \
               ../../scripts/reboot-recovery/tests/test_reboot_auto_recovery_slo_scorecard.py \
               ../../scripts/reboot-recovery/tests/test_188_host_hygiene_checklist.py \

ops/runner/test_cd_controlled_runtime_profile.py

@@ -708,7 +708,10 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "scripts/reboot-recovery/reboot-recovery-readiness-audit.sh)",
         "scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh)",
         "scripts/reboot-recovery/full-stack-cold-start-check.sh)",
+        "scripts/reboot-recovery/cold-start-textfile-exporter.sh)",
+        "scripts/reboot-recovery/install-cold-start-monitor-110.sh)",
         "scripts/reboot-recovery/momo-drive-token-source-recovery-preflight.sh)",
+        "scripts/reboot-recovery/momo-source-arrival-gate.py)",
         "scripts/reboot-recovery/full-stack-recovery-scorecard.sh)",
         "scripts/reboot-recovery/awoooi-startup-110.sh)",
         "scripts/reboot-recovery/harbor-watchdog.sh)",
@@ -719,6 +722,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "scripts/reboot-recovery/tests/test_reboot_p0_operational_contract.py)",
         "scripts/reboot-recovery/tests/test_harbor_watchdog_contract.py)",
         "scripts/reboot-recovery/tests/test_recover_110_control_path_and_harbor_local.py)",
+        "scripts/reboot-recovery/tests/test_momo_source_arrival_gate.py)",
         "../../scripts/ops/backup-health-textfile-exporter.py",
         "../../scripts/backup/gitea-repo-bundle-backup.sh",
         "../../ops/monitoring/alerts-unified.yml",
@@ -728,7 +732,10 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "../../scripts/reboot-recovery/post-start-quick-check.sh",
         "../../scripts/reboot-recovery/188-host-hygiene-maintenance-checklist.sh",
         "../../scripts/reboot-recovery/full-stack-cold-start-check.sh",
+        "../../scripts/reboot-recovery/cold-start-textfile-exporter.sh",
+        "../../scripts/reboot-recovery/install-cold-start-monitor-110.sh",
         "../../scripts/reboot-recovery/momo-drive-token-source-recovery-preflight.sh",
+        "../../scripts/reboot-recovery/momo-source-arrival-gate.py",
         "../../scripts/reboot-recovery/full-stack-recovery-scorecard.sh",
         "../../scripts/reboot-recovery/harbor-watchdog.sh",
         "../../scripts/reboot-recovery/awoooi-startup-110.sh",
@@ -741,6 +748,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "../../scripts/reboot-recovery/tests/test_reboot_p0_operational_contract.py",
         "../../scripts/reboot-recovery/tests/test_harbor_watchdog_contract.py",
         "../../scripts/reboot-recovery/tests/test_recover_110_control_path_and_harbor_local.py",
+        "../../scripts/reboot-recovery/tests/test_momo_source_arrival_gate.py",
         "../../ops/runner/test_check_awoooi_110_controlled_cd_lane_readiness.py",
     ]
     for source in expected_sources: