From 72e9097892907a1a688b8f4c2b5bcfd9e22e43b7 Mon Sep 17 00:00:00 2001 From: Ty Date: Sat, 26 Sep 2026 16:43:37 +0000 Subject: [PATCH] Record S4U session-0 proof, wrapper bug, Leonard elevation, new tunnel URL --- .../04_projects/veripath/fleet-2026-09-26.md | 52 +++++++------------ 1 file changed, 20 insertions(+), 32 deletions(-) diff --git a/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md b/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md index dbdb01c..940094c 100644 --- a/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md +++ b/memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md @@ -1,6 +1,6 @@ # VeriPath fleet snapshot -Updated: 2026-09-26 09:38 PT +Updated: 2026-09-26 09:43 PT Do not store passwords, tokens, or keys in this file. ## Operating model @@ -9,51 +9,39 @@ Do not store passwords, tokens, or keys in this file. - CoS is Grok Bot and has the desktop. Hermes can use the desktop but has no Windows admin. - No Ty unless Gatekeeper authorizes. Nothing sent without an explicit go. - Gitea is the master record. Fleet lives here, not in `veripath-operations`. -- Product: `Tony_tech/veripath`. Client queue: `Tony_tech/veripath-operations`. ## Adopted rules (2026-09-26) - Regis may research, draft, and check status. Nothing irreversible. No post/send. VeriMail owns email. -- Park Regis-to-Hermes until CoS proves the three tasks start with nobody logged in. +- Park Regis-to-Hermes until launcher wrappers die with the Task Scheduler task, so a crash actually restarts. - After that: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only. - Desktop stays Headscale `HS_tony` / `100.64.0.1`. iPhone stays personal Tailscale. -## Persistence (2026-09-26 09:38 PT) +## Persistence (2026-09-26 09:43 PT) -Status: S4U on. Cold-boot proof still owed by CoS. +S4U / session 0 is accepted without a reboot. -Tasks: -- `\VeriPath\Hermes_WebUI` Running S4U -- `\VeriPath\Cloudflared_Tunnel` Running S4U -- `\VeriPath\Hermes_Gateway_leonard` Running S4U +Tasks at Highest, S4U as `fight`, At startup trigger: +- `\VeriPath\Hermes_WebUI` +- `\VeriPath\Cloudflared_Tunnel` +- `\VeriPath\Hermes_Gateway_leonard` -Launchers and logs: `C:\Users\fight\AppData\Local\VeriPath\`. Password still only in `C:\Users\fight\Projects\hermes-webui\.env`. -Web app still bound to `127.0.0.1:8787` only. -Gatekeeper ran `upgrade-to-s4u.ps1` from admin PowerShell at 09:38 PT. +CoS proof: upgrade script stopped all three at 09:37; Task Scheduler started them again under S4U in session 0; parent is Task Scheduler; one copy of each. `/health` 200, bound localhost only, `.env` login passes. Public tunnel 200. Leonard Telegram at 09:38. A real boot with nobody logged in is the only 100% test and was not done. -Tunnel URL rotates. Last reported: `https://fridge-operations-agent-study.trycloudflare.com`. Live URL: `%LOCALAPPDATA%\cloudflared\current-url.txt`. +Open bug: stopping a task kills only the wrapper. Launcher + program keep running. After a Task Scheduler stop of `Hermes_WebUI`, the task showed Ready while the web app stayed up. Crash before next boot/logon will not restart it. -## Machines +Side effect: Leonard now runs elevated. `profiles\leonard` state is unreadable to non-admin tools. -| Name | Role | Headscale | -|---|---|---| -| DESKTOP-81CBTV2 (`fight`) | Hermes + web app | `100.64.0.1` HS_tony | -| DESKTOP-AEI8KMV | Steve Hermes | | -| muse-regis | overflow capture, artifacts only | `100.64.0.6` | -| deepblueubu | model | `100.64.0.2:8084` | -| ubudual5060 | VeriMail model | `100.64.0.9:8082` | -| grokbot-box-1 | offline since 2026-09-20 | `.3` | +Launchers: `C:\Users\fight\AppData\Local\VeriPath\`. +Password only in `C:\Users\fight\Projects\hermes-webui\.env`. +Web app still `127.0.0.1:8787` only. -## Agents - -- Jimmy: Nous, Telegram. Existing auto-start. Do not duplicate. -- Leonard: deepseek-v4-flash via routeapi, Telegram, now task-managed. -- Ashbot and VeriMail running, no Telegram. -- Coach down. Parked. -- Default profile: offline grokbot-box-1 + duplicate Jimmy token. Do not start. +Tunnel URL at 09:43: `https://saving-bosnia-shades-pearl.trycloudflare.com` +Live URL file: `%LOCALAPPDATA%\cloudflared\current-url.txt` ## Open / next -1. CoS proves S4U tasks start with nobody logged in. -2. Then narrow Regis line if still wanted. -3. Parked: Telegram flaps / NAT, Coach, default-profile token, client backlog. +1. CoS edits the three launchers so a dead wrapper stops the child. No admin. No Tony click unless CoS cannot apply it live. +2. Do not ask Tony to reboot unless that is the only honest test after the launcher fix. +3. Then narrow Regis line if still wanted. +4. Parked: Leonard running elevated, Telegram flaps / NAT, Coach, default-profile token, client backlog.