From 802efe4468eb64d20aef1fe313dde5594e5eeb98 Mon Sep 17 00:00:00 2001 From: Ty Date: Sat, 26 Sep 2026 17:20:34 +0000 Subject: [PATCH] Mark Regis forwarder live; leave status-check and local-trust tighten open --- projects/hermes-persistent-os/tasks.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/projects/hermes-persistent-os/tasks.md b/projects/hermes-persistent-os/tasks.md index f6c498a..56814bc 100644 --- a/projects/hermes-persistent-os/tasks.md +++ b/projects/hermes-persistent-os/tasks.md @@ -8,8 +8,10 @@ - [x] Launcher dies if wrapper dies - [x] Phone on live tunnel `https://daughter-cards-fog-compete.trycloudflare.com` - [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind) -- [ ] CoS adds forwarder under web app task, Regis status-check only +- [x] CoS forwarder under `\VeriPath\Hermes_WebUI` (`regis-forward.py`) +- [ ] Regis `/health` status-check only (no login) +- [ ] Tighten: forwarder connections must not get localhost terminal / first-password privileges - [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt -- [ ] Later: existing `python.exe` allow-everything firewall rules (web app plus Python312 and OneDrive copy) +- [ ] Later: existing `python.exe` allow-everything firewall rules See `memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md`.