Mark Regis forwarder live; leave status-check and local-trust tighten open

This commit is contained in:
Ty
2026-09-26 17:20:34 +00:00
parent b2144691bf
commit 802efe4468
+4 -2
View File
@@ -8,8 +8,10 @@
- [x] Launcher dies if wrapper dies - [x] Launcher dies if wrapper dies
- [x] Phone on live tunnel `https://daughter-cards-fog-compete.trycloudflare.com` - [x] Phone on live tunnel `https://daughter-cards-fog-compete.trycloudflare.com`
- [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind) - [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind)
- [ ] CoS adds forwarder under web app task, Regis status-check only - [x] CoS forwarder under `\VeriPath\Hermes_WebUI` (`regis-forward.py`)
- [ ] Regis `/health` status-check only (no login)
- [ ] Tighten: forwarder connections must not get localhost terminal / first-password privileges
- [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt - [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt
- [ ] Later: existing `python.exe` allow-everything firewall rules (web app plus Python312 and OneDrive copy) - [ ] Later: existing `python.exe` allow-everything firewall rules
See `memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md`. See `memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md`.