Tasks — Hermes Persistent OS

Now (2026-09-26)

Session-end persist Leonard, web app, cloudflared
S4U / session 0 proof without reboot
Gatekeeper ran upgrade-to-s4u.ps1
Launcher dies if wrapper dies
Phone on live tunnel https://daughter-cards-fog-compete.trycloudflare.com
Gatekeeper: two firewall rules from admin PowerShell (allow Regis 100.64.0.6 to 100.64.0.1:8787, block everyone else on that bind)
After firewall done: CoS adds forwarder under web app task, Regis status-check only
Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt
Later: existing python.exe allow-everything firewall rules (web app plus Python312 and OneDrive copy)

See memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md.