# DEFERRED: SSH Key Registration with GitHub

## STATUS
- state: blocked
- created: 2026-02-14
- last-checked: 2026-02-14
- priority: P2
- blocked-by: missing-info (token scope limitation)
- estimated-effort-once-unblocked: 2 minutes

## WHAT
Register the Docker container's ED25519 SSH public key with the GitHub account so git operations can use SSH protocol instead of HTTPS.

## WHY BLOCKED
The fine-grained PAT (`ai-agent-dev`) does not include the `admin:public_key` account-level permission, which is required by the `gh ssh-key add` endpoint. The API returns HTTP 403.

Currently mitigated: HTTPS protocol with PAT credential helper works for all git operations. SSH is optional.

## UNBLOCK TRIGGER
Either:
A) Human manually adds the SSH key via GitHub Settings (preferred -- no token change needed)
B) Human regenerates the fine-grained PAT with `admin:public_key` account permission added

## WHAT HUMAN NEEDS TO DO
**Option A (recommended)**:
1. Get the public key:
   ```bash
   cat ~/.ssh/id_ed25519.pub
   ```
2. Go to: https://github.com/settings/ssh/new
3. Title: `ai-agent-dev-server`
4. Paste the public key
5. Click "Add SSH key"

**Option B** (if you want automated key registration for future projects):
1. Go to: https://github.com/settings/personal-access-tokens
2. Edit the `ai-agent-dev` token
3. Under "Account permissions", add `SSH signing keys` = Read and write
4. Save

## WHAT AI DOES ONCE UNBLOCKED
1. Verify SSH access: `ssh -T git@github.com` (should say "Hi LookNoHandsMom!")
2. Optionally switch git protocol: `gh config set git_protocol ssh`
3. Mark resolved, move to `deferred/resolved/`

## CROSS-REFERENCES
- prompt: God-Mode L1, Phase 1.4 (SSH Key for Docker Containers)
- files: `.docker/entrypoint.sh` (already handles SSH key generation)
- issues: none
- depends-on: none (independent of other deferred items)
- unlocks: SSH git protocol option (nice-to-have, HTTPS works fine)
