# VeriPath fleet snapshot

Updated: 2026-09-26 09:43 PT
Do not store passwords, tokens, or keys in this file.

## Operating model

- Anthony (Gatekeeper): irreversible calls only.
- CoS is Grok Bot and has the desktop. Hermes can use the desktop but has no Windows admin.
- No Ty unless Gatekeeper authorizes. Nothing sent without an explicit go.
- Gitea is the master record. Fleet lives here, not in `veripath-operations`.

## Adopted rules (2026-09-26)

- Regis may research, draft, and check status. Nothing irreversible. No post/send. VeriMail owns email.
- Park Regis-to-Hermes until launcher wrappers die with the Task Scheduler task, so a crash actually restarts.
- After that: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only.
- Desktop stays Headscale `HS_tony` / `100.64.0.1`. iPhone stays personal Tailscale.

## Persistence (2026-09-26 09:43 PT)

S4U / session 0 is accepted without a reboot.

Tasks at Highest, S4U as `fight`, At startup trigger:
- `\VeriPath\Hermes_WebUI`
- `\VeriPath\Cloudflared_Tunnel`
- `\VeriPath\Hermes_Gateway_leonard`

CoS proof: upgrade script stopped all three at 09:37; Task Scheduler started them again under S4U in session 0; parent is Task Scheduler; one copy of each. `/health` 200, bound localhost only, `.env` login passes. Public tunnel 200. Leonard Telegram at 09:38. A real boot with nobody logged in is the only 100% test and was not done.

Open bug: stopping a task kills only the wrapper. Launcher + program keep running. After a Task Scheduler stop of `Hermes_WebUI`, the task showed Ready while the web app stayed up. Crash before next boot/logon will not restart it.

Side effect: Leonard now runs elevated. `profiles\leonard` state is unreadable to non-admin tools.

Launchers: `C:\Users\fight\AppData\Local\VeriPath\`.
Password only in `C:\Users\fight\Projects\hermes-webui\.env`.
Web app still `127.0.0.1:8787` only.

Tunnel URL at 09:43: `https://saving-bosnia-shades-pearl.trycloudflare.com`
Live URL file: `%LOCALAPPDATA%\cloudflared\current-url.txt`

## Open / next

1. CoS edits the three launchers so a dead wrapper stops the child. No admin. No Tony click unless CoS cannot apply it live.
2. Do not ask Tony to reboot unless that is the only honest test after the launcher fix.
3. Then narrow Regis line if still wanted.
4. Parked: Leonard running elevated, Telegram flaps / NAT, Coach, default-profile token, client backlog.