# Remote Change Plan

## Intent
- **Requested outcome:**
- **Authorized by / change window:**
- **Target(s):**
- **Environment and criticality:**

## Live discovery evidence
- **OS and release:**
- **Service manager:**
- **Package manager / package origin:**
- **Firewall / network control plane:**
- **Access route and elevation method:**
- **Current component state:**

## Change
- **Desired state:**
- **Exact control plane and command class:**
- **Blast radius:** one host / canary / batch size / full fleet
- **Stop condition:**

## Recovery
- **Rollback procedure:**
- **Independent recovery path:** console, bastion, retained session, or other authorized path
- **State/artifact captured before change:**

## Validation
- **Component evidence:**
- **External or user-visible boundary:**
- **Per-host result record:** target, status, evidence, rollback status

## Completion
- **Outcome:** passed / failed / rolled back / blocked
- **Remaining uncertainty or follow-up:**