---
title: "VeriPath — Tools & Services Inventory"
date: 2026-09-16
type: reference
status: active
author: Jimmy
tags: [veripath, tools, inventory, ops, reference]
related:
  - "[[Call-2026-08-15-Tony]]"
---

# VeriPath — Tools & Services Inventory

> Captured 2026-09-16 by Jimmy. Repo cloned at `C:\Users\fight\Projects\veripath-repo` (commit `bddc0f9`, branch `main`).
> Three evidence sources: (1) live HTTP probes of local services this session, (2) repo markdown keyword scan, (3) transcript `[[Call-2026-08-15-Tony]]`. This is a living inventory — append and re-verify when a tool is added or retired.
> Owner: VeriPath crew. Status: first pass.

## 1. Local services (live-verified this session)

| Tool | Endpoint | Verified | Notes |
|------|----------|----------|-------|
| FreshRSS | `http://127.0.0.1:8280/` | HTTP 302 | Feed reader |
| RSSHub | `http://127.0.0.1:1200/` | HTTP 200 | RSS hub for feed generation |
| FreeToken engine | `http://127.0.0.1:1919/` | HTTP 404 (root) | Local LLM / free-coding-models gateway; root isn't a route |

|> These three are NOT documented in the repo's markdown — recorded from live probe. As of 2026-09-16, `GET /v1/models` reports FreeToken's loaded model = **`MiniCPM5-2B`** (root `C:\models\MiniCPM5-2B`, max_model_len 131072). Re-probe `/v1/models` + the endpoints before relying on any other model.
|> Repo README (2026-09-16) Current Focus is unchanged since 2026-08-28: **NOW** (manual audits: evidence capture, AI representation testing, Silent Customer Loss Maps, canonical business records, owner review) = Active; **LATER** (GeoLocal, MCP/agent infra, payment flows, automated multi-tenant) = Deferred.

## 2. AI / LLM providers (repo-documented)

- **Hermes** — primary agent runtime; per call, pivoted to a stripped-down, business-only role on the VPS.
- **Leonard** — secondary agent (DeepSeek Harness).
- **Claude** (Anthropic), **Gemini** (Google), **Grok** (xAI), **OpenAI**, **Qwen** — all referenced in `docs/operations/visibility-stack-roadmap.md` and other docs.
- **SearXNG** — self-hosted search exit via reverse-Tailscale residential IPs ("web-polite" throttling). Source: `[[Call-2026-08-15-Tony]]` §3 + `research/cold-audits/`.
- **Yelp API** — `YELP_API_KEY` (env) / review analysis. Source: `cold-audit-protocol.md` + `[[Call-2026-08-15-Tony]]` §1.

## 3. Data sources & integrations

- **Apple Maps** — NAP / visibility verification (anti-bot wall documented). Source: `docs/architecture/` + `[[Call-2026-08-15-Tony]]` §3.
- **Google Business Profile (GBP) / Google Maps / Bing** — primary search-engine visibility surfaces (SEO layer). Source: `docs/operations/visibility-stack-roadmap.md` + `cold-audit-protocol.md`.
- **BBB** (Better Business Bureau) — review/claims audit source. Source: `cold-audit-protocol.md`, `docs/use-cases/`.
- **BringFido, Bark.com** — review-source scope (call-transcript source; **confirm vs. actual targets**).
- **DOP API** — internal Digital Operations Partner API (`DOP_API_URL` env). Source: repo env-key scan.
- **Vault Warden** — secrets store (SOC 2, audit-worthy); Bitwarden named as acceptable alternative. Source: `[[Call-2026-08-15-Tony]]` §2§4.

## 4. Agent skills / roles

- **Scout** — evidence capture. Source: commit `bddc0f9` ("wiring Scout, Auditor, and Writer for Phoenix") + `docs/decisions/2026-08-28-wiring-scout-auditor-writer-for-phoenix.md`.
- **Auditor** — audit execution. Same sources.
- **Writer** — deliverable drafts. Same sources.
- **Parasite SEO skill** — `skills/parasite-seo/SKILL.md` (in repo).
- **Yelp AI Chat skill** — `skills/yelp-ai-chat.md` (in repo).

## 5. Infrastructure / hosting / networking

- **Gitea** — repo host / remote `https://gitea.vps1.afterthedemo.com/Tony_tech/veripath.git`. ⚠️ Token-bearing remote — **never** log to vault Git or notes; route via Vault Warden at runtime.
- **Tailscale** — overlay network; `HS_Tony` Windows node `100.64.0.4`. Source: `[[Call-2026-08-15-Tony]]` §5.
- **Headscale** — control plane `74.208.111.99:8443`, tailnet `ai-lab.tailnet`. Source: `[[Call-2026-08-15-Tony]]` §5 (live-verified).
- **Residential IPs** — via reverse-Tailscale → Docker SearXNG exits. Source: `[[Call-2026-08-15-Tony]]` §3.
- **NAS** — model archive ("insurance"). Source: `[[Call-2026-08-15-Tony]]` §4 + `docs/strategic-frame.md`, `docs/vision/vision.md`, `docs/whitepaper.md`.

## 6. Data store / formats

- **SQLite** — canonical business record store. Source: `docs/architecture/DOP-AI-Visibility-Unified-Framework-v1.md`.
- **Gitea git history** — versioned audit runs + decisions (DR-00N).

## 7. Hardware (inference)

- **RTX 5090** (x2 planned) — primary inference; ~10 concurrent seats, 9B-param workload. Source: `[[Call-2026-08-15-Tony]]` §4.
- **RTX 3060** — current inference box (hold). Source: `[[Call-2026-08-15-Tony]]` §4.
- **RTX 1070** — toy for small models (LFM 2.5). Source: `[[Call-2026-08-15-Tony]]` §4.
- **A100 / EPYC** — rack-server consideration (auction analysis). Source: `[[Call-2026-08-15-Tony]]` §4.

## 8. Monitoring / observability

- **Prometheus** — stats instrumentation in the exe → token-footprint/speed dashboard. Source: `[[Call-2026-08-15-Tony]]` §4.

## 9. Templates (repo-authored)

Located across `docs/templates/`, `docs/operations/templates/`, `docs/agents/`, `founding-partner-audit/`, and `gtm/outreach/`. (Note: vault `status.md` §Project Structure references a flat `veripath/templates/` directory that does **not** exist upstream.)

- `docs/agents/audit-findings-template.md` — audit findings
- `docs/operations/templates/pre-call-owner-form.md` — owner pre-call intake form
- `docs/templates/client-audit-delivery-email.md` — client delivery email
- `docs/templates/data-inventory-template.md` — data inventory
- `docs/templates/gbp-snapshot-intake.md` — Google Business Profile snapshot intake
- `docs/templates/remediation-brief-template.md` — remediation brief
- `docs/templates/requirements-template.md` — requirements capture
- `docs/templates/threat-register-template.md` — threat register
- `docs/templates/workflows-template.md` — workflow template
- `founding-partner-audit/report-template.md` — founding-partner audit report
- `gtm/outreach/top5-cold-audit-templates.md` — cold-audit outreach templates

## Open items

- [ ] Reconcile `research/bizl-com/42-tool-ai-scan.md`, `43-tool-citation-audit.md`, `44-tool-competitor-gap.md` + `docs/operations/visibility-stack-roadmap.md` against §2–§3; fold in any material tools.
- [ ] Document FreshRSS / RSSHub / FreeToken / Tailscale / Headscale / Vault Warden in the repo docs (currently live + call-transcript only).
- [ ] Confirm BringFido / Bark.com are real review-source targets vs. call-transcript aspiration.
- [ ] De-tokenize local Gitea remote (move to Vault Warden runtime lookup) — the embedded token must not ride in git history.
- [ ] No `index.md` exists in this vault project folder yet → register this file (and the call note) once the crew creates one.

Owner / status: VeriPath crew maintains. This note was authored by Jimmy; treat sections 1, 3, 5, 7, 8 as live-probe/transcript-backed (re-verify services + URLs periodically), and §2, §4 as repo-backed.