Record S4U session-0 proof, wrapper bug, Leonard elevation, new tunnel URL

This commit is contained in:
Ty
2026-09-26 16:43:37 +00:00
parent eae9401de7
commit 72e9097892
@@ -1,6 +1,6 @@
# VeriPath fleet snapshot
Updated: 2026-09-26 09:38 PT
Updated: 2026-09-26 09:43 PT
Do not store passwords, tokens, or keys in this file.
## Operating model
@@ -9,51 +9,39 @@ Do not store passwords, tokens, or keys in this file.
- CoS is Grok Bot and has the desktop. Hermes can use the desktop but has no Windows admin.
- No Ty unless Gatekeeper authorizes. Nothing sent without an explicit go.
- Gitea is the master record. Fleet lives here, not in `veripath-operations`.
- Product: `Tony_tech/veripath`. Client queue: `Tony_tech/veripath-operations`.
## Adopted rules (2026-09-26)
- Regis may research, draft, and check status. Nothing irreversible. No post/send. VeriMail owns email.
- Park Regis-to-Hermes until CoS proves the three tasks start with nobody logged in.
- Park Regis-to-Hermes until launcher wrappers die with the Task Scheduler task, so a crash actually restarts.
- After that: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only.
- Desktop stays Headscale `HS_tony` / `100.64.0.1`. iPhone stays personal Tailscale.
## Persistence (2026-09-26 09:38 PT)
## Persistence (2026-09-26 09:43 PT)
Status: S4U on. Cold-boot proof still owed by CoS.
S4U / session 0 is accepted without a reboot.
Tasks:
- `\VeriPath\Hermes_WebUI` Running S4U
- `\VeriPath\Cloudflared_Tunnel` Running S4U
- `\VeriPath\Hermes_Gateway_leonard` Running S4U
Tasks at Highest, S4U as `fight`, At startup trigger:
- `\VeriPath\Hermes_WebUI`
- `\VeriPath\Cloudflared_Tunnel`
- `\VeriPath\Hermes_Gateway_leonard`
Launchers and logs: `C:\Users\fight\AppData\Local\VeriPath\`. Password still only in `C:\Users\fight\Projects\hermes-webui\.env`.
Web app still bound to `127.0.0.1:8787` only.
Gatekeeper ran `upgrade-to-s4u.ps1` from admin PowerShell at 09:38 PT.
CoS proof: upgrade script stopped all three at 09:37; Task Scheduler started them again under S4U in session 0; parent is Task Scheduler; one copy of each. `/health` 200, bound localhost only, `.env` login passes. Public tunnel 200. Leonard Telegram at 09:38. A real boot with nobody logged in is the only 100% test and was not done.
Tunnel URL rotates. Last reported: `https://fridge-operations-agent-study.trycloudflare.com`. Live URL: `%LOCALAPPDATA%\cloudflared\current-url.txt`.
Open bug: stopping a task kills only the wrapper. Launcher + program keep running. After a Task Scheduler stop of `Hermes_WebUI`, the task showed Ready while the web app stayed up. Crash before next boot/logon will not restart it.
## Machines
Side effect: Leonard now runs elevated. `profiles\leonard` state is unreadable to non-admin tools.
| Name | Role | Headscale |
|---|---|---|
| DESKTOP-81CBTV2 (`fight`) | Hermes + web app | `100.64.0.1` HS_tony |
| DESKTOP-AEI8KMV | Steve Hermes | |
| muse-regis | overflow capture, artifacts only | `100.64.0.6` |
| deepblueubu | model | `100.64.0.2:8084` |
| ubudual5060 | VeriMail model | `100.64.0.9:8082` |
| grokbot-box-1 | offline since 2026-09-20 | `.3` |
Launchers: `C:\Users\fight\AppData\Local\VeriPath\`.
Password only in `C:\Users\fight\Projects\hermes-webui\.env`.
Web app still `127.0.0.1:8787` only.
## Agents
- Jimmy: Nous, Telegram. Existing auto-start. Do not duplicate.
- Leonard: deepseek-v4-flash via routeapi, Telegram, now task-managed.
- Ashbot and VeriMail running, no Telegram.
- Coach down. Parked.
- Default profile: offline grokbot-box-1 + duplicate Jimmy token. Do not start.
Tunnel URL at 09:43: `https://saving-bosnia-shades-pearl.trycloudflare.com`
Live URL file: `%LOCALAPPDATA%\cloudflared\current-url.txt`
## Open / next
1. CoS proves S4U tasks start with nobody logged in.
2. Then narrow Regis line if still wanted.
3. Parked: Telegram flaps / NAT, Coach, default-profile token, client backlog.
1. CoS edits the three launchers so a dead wrapper stops the child. No admin. No Tony click unless CoS cannot apply it live.
2. Do not ask Tony to reboot unless that is the only honest test after the launcher fix.
3. Then narrow Regis line if still wanted.
4. Parked: Leonard running elevated, Telegram flaps / NAT, Coach, default-profile token, client backlog.