DARK FLOW CRYPTO GUARDIAN - VPS MIGRATION PACKAGE v1.0.0
=========================================================

PURPOSE
-------
Move the Dark Flow Crypto Guardian read-only Binance balance relay + Cloudflare Tunnel to a new Windows VPS with the smallest possible manual workflow.

SAFETY BOUNDARY
---------------
This package does NOT contain Binance API keys, Binance API secrets, ChatGPT Guardian keys, Cloudflare certs, relay tokens, passwords, Make credentials, or any live trading credentials.
The Guardian relay exposes account-read forwarding only. It does not expose Binance BUY, SELL, transfer, withdrawal or fund-moving routes.

FAST INSTALL
------------
1. Open Administrator PowerShell on the new VPS.
2. Extract the Full VPS Package.
3. Run:
   powershell -ExecutionPolicy Bypass -File .\INSTALL_CRYPTO_GUARDIAN_VPS.ps1
4. Complete Cloudflare browser authorization if prompted.
5. After install, replace the OLD trusted IP with the NEW VPS IP only on Binance API key: DARK-FLOW-CRYPTO-GUARDIAN.
6. Keep Enable Reading ON and every trading/transfer/withdraw permission OFF.
7. Do NOT edit DARK-FLOW-CRYPTO-LIVE.
8. Run in ChatGPT: Crypto Guardian full audit

ONE-COMMAND WEB INSTALL
-----------------------
Run from Administrator PowerShell:
  $p="$env:TEMP\df-crypto-guardian-web.ps1"; Invoke-WebRequest -UseBasicParsing "https://crypto.forextamil.com/INSTALL_CRYPTO_GUARDIAN_FROM_WEB.ps1" -OutFile $p; powershell -ExecutionPolicy Bypass -File $p

SERVICE NAMES
-------------
DarkFlowCryptoGuardianRelay
DarkFlowCryptoGuardianTunnel

HEALTH CHECK
------------
powershell -ExecutionPolicy Bypass -File .\CHECK_CRYPTO_GUARDIAN_VPS.ps1

SAFE SERVICE REPAIR
-------------------
powershell -ExecutionPolicy Bypass -File .\REPAIR_CRYPTO_GUARDIAN_VPS.ps1

UNINSTALL SERVICE TASKS
-----------------------
powershell -ExecutionPolicy Bypass -File .\UNINSTALL_CRYPTO_GUARDIAN_VPS.ps1

EXPECTED HEALTH
---------------
Local relay health: PASS
Public Cloudflare Tunnel health: PASS
Guardian audit: HEALTHY
Binance balance transport: VPS_RELAY
Money-moving actions: FALSE

MIGRATION NOTE
--------------
Install and verify the new VPS first. Then update the Binance Guardian read-only trusted IP. Only after the new Guardian full audit is HEALTHY should you retire the old VPS Guardian tasks.