personal-agent-os/projects/hermes-persistent-os/tasks.md

Tasks — Hermes Persistent OS

Now (2026-09-26)

• Session-end persist Leonard, web app, cloudflared
• S4U / session 0 proof without reboot
• Gatekeeper ran upgrade-to-s4u.ps1
• Launcher dies if wrapper dies
• Phone on live tunnel https://daughter-cards-fog-compete.trycloudflare.com
• Gatekeeper: two firewall rules (allow Regis 100.64.0.6 to 100.64.0.1:8787, block everyone else on that bind)
• CoS forwarder under \VeriPath\Hermes_WebUI (regis-forward.py)
• Regis /health 200 from 100.64.0.6
• Tighten: forwarder connections are not localhost-privileged (127.0.0.2 + server.py patch)
• Watch: re-apply server.py patch after any hermes-webui update, or forwarder stops
• Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt
• Later: existing python.exe allow-everything firewall rules

See memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md.