diff --git a/docs/ops/FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK_VPS_12_24_720_UBUNTU_24_04.md b/docs/ops/FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK_VPS_12_24_720_UBUNTU_24_04.md
index dab9530..be5e0bf 100644
--- a/docs/ops/FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK_VPS_12_24_720_UBUNTU_24_04.md
+++ b/docs/ops/FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK_VPS_12_24_720_UBUNTU_24_04.md
@@ -4,12 +4,12 @@ Last updated: 2026-05-31 (UTC)
 Scope: Canonical sensitive VPS runbook for the current Forgejo/Woodpecker control plane, extended for the IONOS `VPS 12-24-720` Ubuntu `24.04` Linux target, migration/cutover sequence, and remote-development setup.
 Classification: **Highly Sensitive** (contains real credentials, keys/paths, and secrets).
 
-## Reverse-sync execution pointer
+## Reverse-SSH recovery pointer
 
-For cross-repo reverse sync behavior, pre-sync gate outcomes, and latest forced
-execution evidence, see:
+For the current HyperTwist reverse-SSH auth-mode recovery and stale-listener
+doctrine, see:
 
-- [VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md](/home/dev/src/VectorShell/docs/ops/VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md)
+- [HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md](/home/dev/src/HyperTwist/docs/ops/HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md)
 
 Lineage note:
 - archived predecessor copy: `C:\HyperTwist\docs\ops\archive\DEPRECATED_FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK.md`
diff --git a/docs/ops/HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md b/docs/ops/HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md
index c211470..544d34a 100644
--- a/docs/ops/HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md
+++ b/docs/ops/HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md
@@ -28,6 +28,7 @@ As of `2026-06-01`, the reverse-SSH Windows shell path is also verified live
 for HyperTwist Unreal build validation. The current proof note is:
 
 - `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md`
+- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md`
 
 ## Why reverse SSH fits the immediate need
 
@@ -83,12 +84,14 @@ Current verified tunnel from Windows to VPS:
 
 ```powershell
 ssh -NT -o ExitOnForwardFailure=yes -o ServerAliveInterval=30 -o ServerAliveCountMax=3 -R 22022:localhost:22 dev@212.227.13.220
+ssh -NT -o ExitOnForwardFailure=yes -o ServerAliveInterval=30 -o ServerAliveCountMax=3 -R 22023:localhost:22 dev@212.227.13.220
 ```
 
 Then from the VPS:
 
 ```bash
 ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no -o StrictHostKeyChecking=accept-new -o ConnectTimeout=10 -p 22022 -l 'DESKTOP-KS3VGHU\\anthracite ace' localhost
+ssh -o PreferredAuthentications=password -o PubkeyAuthentication=no -o StrictHostKeyChecking=accept-new -o ConnectTimeout=10 -p 22023 -l 'DESKTOP-KS3VGHU\\anthracite ace' localhost
 ```
 
 Credential details remain in the sensitive VPS runbook rather than being
diff --git a/docs/ops/HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md b/docs/ops/HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md
index b136689..90c7b9b 100644
--- a/docs/ops/HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md
+++ b/docs/ops/HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md
@@ -8,7 +8,7 @@ execution look hung.
 
 ## Incident signature
 
-- tunnel listener reachable (`localhost:22022`)
+- tunnel listener reachable (`localhost:22022`, fallback `localhost:22023`)
 - non-interactive command path fails or stalls at auth boundary
 - interactive/password-backed path succeeds
 
diff --git a/docs/ops/HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md b/docs/ops/HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md
index 6e21c94..751cf6c 100644
--- a/docs/ops/HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md
+++ b/docs/ops/HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md
@@ -18,8 +18,8 @@ This verification sits beneath these authoritative docs:
 
 - `C:\HyperTwist\docs\ops\HYPERTWIST_UNREAL_BUILD_VALIDATION_REQUIREMENT_2026-06-01.md`
 - `C:\HyperTwist\docs\ops\HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md`
+- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md`
 - `C:\HyperTwist\docs\ops\FORGEJO_WOODPECKER_VPS_A_TO_Z_SENSITIVE_RUNBOOK_VPS_12_24_720_UBUNTU_24_04.md`
-- [VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md](/home/dev/src/VectorShell/docs/ops/VECTORSHELL_REVERSE_SYNC_GATING_AND_EXECUTION_REPORT_2026-06-02.md)
 
 Credential details stay in the sensitive runbook.
 
diff --git a/docs/ops/HYPERTWIST_UNREAL_BUILD_VALIDATION_REQUIREMENT_2026-06-01.md b/docs/ops/HYPERTWIST_UNREAL_BUILD_VALIDATION_REQUIREMENT_2026-06-01.md
index 0404086..38f1280 100644
--- a/docs/ops/HYPERTWIST_UNREAL_BUILD_VALIDATION_REQUIREMENT_2026-06-01.md
+++ b/docs/ops/HYPERTWIST_UNREAL_BUILD_VALIDATION_REQUIREMENT_2026-06-01.md
@@ -85,6 +85,7 @@ Current related note:
 
 - `C:\HyperTwist\docs\ops\HYPERTWIST_DEFERRED_TAILSCALE_AND_OPENSSH_LOCAL_REACHABILITY_NOTE_2026-05-31.md`
 - `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_WINDOWS_BUILD_LANE_VERIFICATION_2026-06-01.md`
+- `C:\HyperTwist\docs\ops\HYPERTWIST_REVERSE_SSH_AUTH_MODE_MISMATCH_AND_RECOVERY_2026-06-02.md`
 
 That reachability note records the current short-term preference to use reverse
 SSH first and defer `Tailscale + OpenSSH` for a calmer setup window.