# VeriPath fleet snapshot

Updated: 2026-09-26 09:38 PT
Do not store passwords, tokens, or keys in this file.

## Operating model

- Anthony (Gatekeeper): irreversible calls only.
- CoS is Grok Bot and has the desktop. Hermes can use the desktop but has no Windows admin.
- No Ty unless Gatekeeper authorizes. Nothing sent without an explicit go.
- Gitea is the master record. Fleet lives here, not in `veripath-operations`.
- Product: `Tony_tech/veripath`. Client queue: `Tony_tech/veripath-operations`.

## Adopted rules (2026-09-26)

- Regis may research, draft, and check status. Nothing irreversible. No post/send. VeriMail owns email.
- Park Regis-to-Hermes until CoS proves the three tasks start with nobody logged in.
- After that: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only.
- Desktop stays Headscale `HS_tony` / `100.64.0.1`. iPhone stays personal Tailscale.

## Persistence (2026-09-26 09:38 PT)

Status: S4U on. Cold-boot proof still owed by CoS.

Tasks:
- `\VeriPath\Hermes_WebUI` Running S4U
- `\VeriPath\Cloudflared_Tunnel` Running S4U
- `\VeriPath\Hermes_Gateway_leonard` Running S4U

Launchers and logs: `C:\Users\fight\AppData\Local\VeriPath\`. Password still only in `C:\Users\fight\Projects\hermes-webui\.env`.
Web app still bound to `127.0.0.1:8787` only.
Gatekeeper ran `upgrade-to-s4u.ps1` from admin PowerShell at 09:38 PT.

Tunnel URL rotates. Last reported: `https://fridge-operations-agent-study.trycloudflare.com`. Live URL: `%LOCALAPPDATA%\cloudflared\current-url.txt`.

## Machines

| Name | Role | Headscale |
|---|---|---|
| DESKTOP-81CBTV2 (`fight`) | Hermes + web app | `100.64.0.1` HS_tony |
| DESKTOP-AEI8KMV | Steve Hermes | |
| muse-regis | overflow capture, artifacts only | `100.64.0.6` |
| deepblueubu | model | `100.64.0.2:8084` |
| ubudual5060 | VeriMail model | `100.64.0.9:8082` |
| grokbot-box-1 | offline since 2026-09-20 | `.3` |

## Agents

- Jimmy: Nous, Telegram. Existing auto-start. Do not duplicate.
- Leonard: deepseek-v4-flash via routeapi, Telegram, now task-managed.
- Ashbot and VeriMail running, no Telegram.
- Coach down. Parked.
- Default profile: offline grokbot-box-1 + duplicate Jimmy token. Do not start.

## Open / next

1. CoS proves S4U tasks start with nobody logged in.
2. Then narrow Regis line if still wanted.
3. Parked: Telegram flaps / NAT, Coach, default-profile token, client backlog.