Harden Gemini scripts with verified SSH trust

scripts/telemetry.py

@@ -10,9 +10,14 @@ import os
 import sys
 import json
 import time
-import subprocess
 import argparse
 
+SCRIPT_DIR = os.path.dirname(os.path.abspath(__file__))
+if SCRIPT_DIR not in sys.path:
+    sys.path.insert(0, SCRIPT_DIR)
+
+from ssh_trust import VerifiedSSHExecutor
+
 # --- CONFIGURATION ---
 FLEET = {
     "mac": "10.1.10.77",
@@ -23,7 +28,8 @@ FLEET = {
 TELEMETRY_FILE = "logs/telemetry.json"
 
 class Telemetry:
-    def __init__(self):
+    def __init__(self, executor=None):
+        self.executor = executor or VerifiedSSHExecutor()
         # Find logs relative to repo root
         script_dir = os.path.dirname(os.path.abspath(__file__))
         repo_root = os.path.dirname(script_dir)
@@ -41,14 +47,12 @@ class Telemetry:
         # Command to get disk usage, memory usage (%), and load avg
         cmd = "df -h / | tail -1 | awk '{print $5}' && free -m | grep Mem | awk '{print $3/$2 * 100}' && uptime | awk '{print $10}'"
         
-        ssh_cmd = ["ssh", "-o", "StrictHostKeyChecking=no", f"root@{ip}", cmd]
-        if host == "mac":
+        if host == 'mac':
             # Mac specific commands
             cmd = "df -h / | tail -1 | awk '{print $5}' && sysctl -n vm.page_pageable_internal_count && uptime | awk '{print $10}'"
-            ssh_cmd = ["bash", "-c", cmd]
-            
+
         try:
-            res = subprocess.run(ssh_cmd, capture_output=True, text=True, timeout=10)
+            res = self.executor.run_script(ip, cmd, local=(host == 'mac'), timeout=10)
             if res.returncode == 0:
                 lines = res.stdout.strip().split("\n")
                 return {