Tony_tech/personal-agent-os
6
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Record S4U session-0 proof, wrapper bug, Leonard elevation, new tunnel URL

Browse Source
This commit is contained in:
Ty
2026-09-26 16:43:37 +00:00
parent eae9401de7
commit 72e9097892
1 changed files with 20 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md
+20 -32
View File
@@ -1,6 +1,6 @@
# VeriPath fleet snapshot # VeriPath fleet snapshot
Updated: 2026-09-26 09:38 PT Updated: 2026-09-26 09:43 PT
Do not store passwords, tokens, or keys in this file. Do not store passwords, tokens, or keys in this file.
## Operating model ## Operating model
@@ -9,51 +9,39 @@ Do not store passwords, tokens, or keys in this file.
- CoS is Grok Bot and has the desktop. Hermes can use the desktop but has no Windows admin. - CoS is Grok Bot and has the desktop. Hermes can use the desktop but has no Windows admin.
- No Ty unless Gatekeeper authorizes. Nothing sent without an explicit go. - No Ty unless Gatekeeper authorizes. Nothing sent without an explicit go.
- Gitea is the master record. Fleet lives here, not in `veripath-operations`. - Gitea is the master record. Fleet lives here, not in `veripath-operations`.
- Product: `Tony_tech/veripath`. Client queue: `Tony_tech/veripath-operations`.
## Adopted rules (2026-09-26) ## Adopted rules (2026-09-26)
- Regis may research, draft, and check status. Nothing irreversible. No post/send. VeriMail owns email. - Regis may research, draft, and check status. Nothing irreversible. No post/send. VeriMail owns email.
- Park Regis-to-Hermes until CoS proves the three tasks start with nobody logged in. - Park Regis-to-Hermes until launcher wrappers die with the Task Scheduler task, so a crash actually restarts.
- After that: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only. - After that: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only.
- Desktop stays Headscale `HS_tony` / `100.64.0.1`. iPhone stays personal Tailscale. - Desktop stays Headscale `HS_tony` / `100.64.0.1`. iPhone stays personal Tailscale.
## Persistence (2026-09-26 09:38 PT) ## Persistence (2026-09-26 09:43 PT)
Status: S4U on. Cold-boot proof still owed by CoS. S4U / session 0 is accepted without a reboot.
Tasks: Tasks at Highest, S4U as `fight`, At startup trigger:
- `\VeriPath\Hermes_WebUI` Running S4U - `\VeriPath\Hermes_WebUI`
- `\VeriPath\Cloudflared_Tunnel` Running S4U - `\VeriPath\Cloudflared_Tunnel`
- `\VeriPath\Hermes_Gateway_leonard` Running S4U - `\VeriPath\Hermes_Gateway_leonard`
Launchers and logs: `C:\Users\fight\AppData\Local\VeriPath\`. Password still only in `C:\Users\fight\Projects\hermes-webui\.env`. CoS proof: upgrade script stopped all three at 09:37; Task Scheduler started them again under S4U in session 0; parent is Task Scheduler; one copy of each. `/health` 200, bound localhost only, `.env` login passes. Public tunnel 200. Leonard Telegram at 09:38. A real boot with nobody logged in is the only 100% test and was not done.
Web app still bound to `127.0.0.1:8787` only.
Gatekeeper ran `upgrade-to-s4u.ps1` from admin PowerShell at 09:38 PT.
Tunnel URL rotates. Last reported: `https://fridge-operations-agent-study.trycloudflare.com`. Live URL: `%LOCALAPPDATA%\cloudflared\current-url.txt`. Open bug: stopping a task kills only the wrapper. Launcher + program keep running. After a Task Scheduler stop of `Hermes_WebUI`, the task showed Ready while the web app stayed up. Crash before next boot/logon will not restart it.
## Machines Side effect: Leonard now runs elevated. `profiles\leonard` state is unreadable to non-admin tools.
| Name | Role | Headscale | Launchers: `C:\Users\fight\AppData\Local\VeriPath\`.
|---|---|---| Password only in `C:\Users\fight\Projects\hermes-webui\.env`.
| DESKTOP-81CBTV2 (`fight`) | Hermes + web app | `100.64.0.1` HS_tony | Web app still `127.0.0.1:8787` only.
| DESKTOP-AEI8KMV | Steve Hermes | |
| muse-regis | overflow capture, artifacts only | `100.64.0.6` |
| deepblueubu | model | `100.64.0.2:8084` |
| ubudual5060 | VeriMail model | `100.64.0.9:8082` |
| grokbot-box-1 | offline since 2026-09-20 | `.3` |
## Agents Tunnel URL at 09:43: `https://saving-bosnia-shades-pearl.trycloudflare.com`
Live URL file: `%LOCALAPPDATA%\cloudflared\current-url.txt`
- Jimmy: Nous, Telegram. Existing auto-start. Do not duplicate.
- Leonard: deepseek-v4-flash via routeapi, Telegram, now task-managed.
- Ashbot and VeriMail running, no Telegram.
- Coach down. Parked.
- Default profile: offline grokbot-box-1 + duplicate Jimmy token. Do not start.
## Open / next ## Open / next
1. CoS proves S4U tasks start with nobody logged in. 1. CoS edits the three launchers so a dead wrapper stops the child. No admin. No Tony click unless CoS cannot apply it live.
2. Then narrow Regis line if still wanted. 2. Do not ask Tony to reboot unless that is the only honest test after the launcher fix.
3. Parked: Telegram flaps / NAT, Coach, default-profile token, client backlog. 3. Then narrow Regis line if still wanted.
4. Parked: Leonard running elevated, Telegram flaps / NAT, Coach, default-profile token, client backlog.