User + sudo

Reconnaissance — before touching anything

The run starts read-only. Before a single change, Servor checks the real state of your server — a real machine is rarely clean, and only what is actually there decides what happens next.

• 01does the user already exist? do not overwrite it

The steps — each one proves itself

The playbook below guides the run; the model adapts each command to the distribution and state found during reconnaissance. A step only counts as done when its verification passes.

1. 01

   Create the userdestructive

   Verified by

   id ${username} >/dev/null 2>&1 && echo ok
2. 02

   Install the SSH key

   Verified by

   grep -cF "${pubkey}" /home/${username}/.ssh/authorized_keys
3. 03

   Add to the sudo groupdestructive

   Verified by

   id -nG ${username} | grep -c sudo

Variables

What you choose before launching — the recipe fills in the rest.

${username}

Username

${pubkey}

SSH public key

${sudo}

sudo access

How Servor runs this recipe

Servor is zero-knowledge: the platform cannot execute anything on its own. When you launch this recipe, an AI run reads the reconnaissance, plans the steps, and asks for your approval. Each approved command is signed by your browser — with a key the server never sees — then relayed to the agent, which verifies the signature locally before executing.