From 18a7779da23d74710aaf122637b352aae08cc7b0 Mon Sep 17 00:00:00 2001 From: Ty Date: Sat, 26 Sep 2026 17:41:09 +0000 Subject: [PATCH] Mark local-trust tighten done --- projects/hermes-persistent-os/tasks.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/projects/hermes-persistent-os/tasks.md b/projects/hermes-persistent-os/tasks.md index 3e476d5..bea2532 100644 --- a/projects/hermes-persistent-os/tasks.md +++ b/projects/hermes-persistent-os/tasks.md @@ -10,7 +10,8 @@ - [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind) - [x] CoS forwarder under `\VeriPath\Hermes_WebUI` (`regis-forward.py`) - [x] Regis `/health` 200 from `100.64.0.6` -- [ ] Tighten: forwarder connections must not get localhost terminal / first-password privileges +- [x] Tighten: forwarder connections are not localhost-privileged (`127.0.0.2` + `server.py` patch) +- [ ] Watch: re-apply `server.py` patch after any hermes-webui update, or forwarder stops - [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt - [ ] Later: existing `python.exe` allow-everything firewall rules