Mark local-trust tighten done

2026-09-26 17:41:09 +00:00
parent a2ecf1f766
commit 18a7779da2
1 changed files with 2 additions and 1 deletions
@@ -10,7 +10,8 @@
 - [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind)
 - [x] CoS forwarder under `\VeriPath\Hermes_WebUI` (`regis-forward.py`)
 - [x] Regis `/health` 200 from `100.64.0.6`
- [ ] Tighten: forwarder connections must not get localhost terminal / first-password privileges
+- [x] Tighten: forwarder connections are not localhost-privileged (`127.0.0.2` + `server.py` patch)
+- [ ] Watch: re-apply `server.py` patch after any hermes-webui update, or forwarder stops
 - [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt
 - [ ] Later: existing `python.exe` allow-everything firewall rules