19 lines
977 B
Markdown
19 lines
977 B
Markdown
# Tasks — Hermes Persistent OS
|
|
|
|
## Now (2026-09-26)
|
|
|
|
- [x] Session-end persist Leonard, web app, cloudflared
|
|
- [x] S4U / session 0 proof without reboot
|
|
- [x] Gatekeeper ran `upgrade-to-s4u.ps1`
|
|
- [x] Launcher dies if wrapper dies
|
|
- [x] Phone on live tunnel `https://daughter-cards-fog-compete.trycloudflare.com`
|
|
- [x] Gatekeeper: two firewall rules (allow Regis `100.64.0.6` to `100.64.0.1:8787`, block everyone else on that bind)
|
|
- [x] CoS forwarder under `\VeriPath\Hermes_WebUI` (`regis-forward.py`)
|
|
- [x] Regis `/health` 200 from `100.64.0.6`
|
|
- [x] Tighten: forwarder connections are not localhost-privileged (`127.0.0.2` + `server.py` patch)
|
|
- [ ] Watch: re-apply `server.py` patch after any hermes-webui update, or forwarder stops
|
|
- [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt
|
|
- [ ] Later: existing `python.exe` allow-everything firewall rules
|
|
|
|
See `memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md`.
|