VeriPath fleet snapshot

Updated: 2026-09-26 10:04 PT Do not store passwords, tokens, or keys in this file.

Operating model

Anthony (Gatekeeper): irreversible calls only.
CoS is Grok Bot and has the desktop. Hermes can use the desktop but has no Windows admin.
No Ty unless Gatekeeper authorizes. Nothing sent without an explicit go.
Gitea is the master record. Fleet lives here, not in veripath-operations.

Adopted rules (2026-09-26)

Regis may research, draft, and check status. Nothing irreversible. No post/send. VeriMail owns email.
After firewall: small forwarder 100.64.0.1:8787 -> 127.0.0.1:8787. Status-check test only.
Desktop stays Headscale HS_tony / 100.64.0.1. iPhone stays personal Tailscale.

Persistence

S4U / session 0 accepted. Wrapper-stop fix proven 09:50. Web app: 127.0.0.1:8787 only. Healthy. Tunnel /health 200. Hermex live on https://daughter-cards-fog-compete.trycloudflare.com. Password only in C:\Users\fight\Projects\hermes-webui\.env.

Regis line (2026-09-26 10:04 PT)

Firewall done. Both rules Enabled, PrimaryStatus OK:

VeriPath WebUI from Regis — Inbound Allow
VeriPath WebUI block non-Regis — Inbound Block

Listen address not changed yet. Next is CoS forwarder under \VeriPath\Hermes_WebUI only, then Regis status-check.

Also reported, not changed: python.exe allow-everything rules on the web app Python, C:\Program Files\Python312, and a copy under OneDrive\Desktop\data\assets.

Open / next

Done: firewall rules.
CoS forwarder + Regis status-check.
Parked: Leonard elevated, unknown 09:48 start, other Python allow-all rules, Telegram / NAT, Coach, default-profile token, client backlog.

1.7 KiB Raw Blame History