VeriPath — Tools & Services Inventory

Captured 2026-09-16 by Jimmy. Repo cloned at C:\Users\fight\Projects\veripath-repo (commit bddc0f9, branch main). Three evidence sources: (1) live HTTP probes of local services this session, (2) repo markdown keyword scan, (3) transcript [[Call-2026-08-15-Tony]]. This is a living inventory — append and re-verify when a tool is added or retired. Owner: VeriPath crew. Status: first pass.

1. Local services (live-verified this session)

Tool	Endpoint	Verified	Notes
FreshRSS	`http://127.0.0.1:8280/`	HTTP 302	Feed reader
RSSHub	`http://127.0.0.1:1200/`	HTTP 200	RSS hub for feed generation
FreeToken engine	`http://127.0.0.1:1919/`	HTTP 404 (root)	Local LLM / free-coding-models gateway; root isn't a route

|> These three are NOT documented in the repo's markdown — recorded from live probe. As of 2026-09-16, GET /v1/models reports FreeToken's loaded model = MiniCPM5-2B (root C:\models\MiniCPM5-2B, max_model_len 131072). Re-probe /v1/models + the endpoints before relying on any other model. |> Repo README (2026-09-16) Current Focus is unchanged since 2026-08-28: NOW (manual audits: evidence capture, AI representation testing, Silent Customer Loss Maps, canonical business records, owner review) = Active; LATER (GeoLocal, MCP/agent infra, payment flows, automated multi-tenant) = Deferred.

2. AI / LLM providers (repo-documented)

Hermes — primary agent runtime; per call, pivoted to a stripped-down, business-only role on the VPS.
Leonard — secondary agent (DeepSeek Harness).
Claude (Anthropic), Gemini (Google), Grok (xAI), OpenAI, Qwen — all referenced in docs/operations/visibility-stack-roadmap.md and other docs.
SearXNG — self-hosted search exit via reverse-Tailscale residential IPs ("web-polite" throttling). Source: [[Call-2026-08-15-Tony]] §3 + research/cold-audits/.
Yelp API — YELP_API_KEY (env) / review analysis. Source: cold-audit-protocol.md + [[Call-2026-08-15-Tony]] §1.

3. Data sources & integrations

Apple Maps — NAP / visibility verification (anti-bot wall documented). Source: docs/architecture/ + [[Call-2026-08-15-Tony]] §3.
Google Business Profile (GBP) / Google Maps / Bing — primary search-engine visibility surfaces (SEO layer). Source: docs/operations/visibility-stack-roadmap.md + cold-audit-protocol.md.
BBB (Better Business Bureau) — review/claims audit source. Source: cold-audit-protocol.md, docs/use-cases/.
BringFido, Bark.com — review-source scope (call-transcript source; confirm vs. actual targets).
DOP API — internal Digital Operations Partner API (DOP_API_URL env). Source: repo env-key scan.
Vault Warden — secrets store (SOC 2, audit-worthy); Bitwarden named as acceptable alternative. Source: [[Call-2026-08-15-Tony]] §2§4.

4. Agent skills / roles

Scout — evidence capture. Source: commit bddc0f9 ("wiring Scout, Auditor, and Writer for Phoenix") + docs/decisions/2026-08-28-wiring-scout-auditor-writer-for-phoenix.md.
Auditor — audit execution. Same sources.
Writer — deliverable drafts. Same sources.
Parasite SEO skill — skills/parasite-seo/SKILL.md (in repo).
Yelp AI Chat skill — skills/yelp-ai-chat.md (in repo).

5. Infrastructure / hosting / networking

Gitea — repo host / remote https://gitea.vps1.afterthedemo.com/Tony_tech/veripath.git. ⚠️ Token-bearing remote — never log to vault Git or notes; route via Vault Warden at runtime.
Tailscale — overlay network; HS_Tony Windows node 100.64.0.4. Source: [[Call-2026-08-15-Tony]] §5.
Headscale — control plane 74.208.111.99:8443, tailnet ai-lab.tailnet. Source: [[Call-2026-08-15-Tony]] §5 (live-verified).
Residential IPs — via reverse-Tailscale → Docker SearXNG exits. Source: [[Call-2026-08-15-Tony]] §3.
NAS — model archive ("insurance"). Source: [[Call-2026-08-15-Tony]] §4 + docs/strategic-frame.md, docs/vision/vision.md, docs/whitepaper.md.

6. Data store / formats

SQLite — canonical business record store. Source: docs/architecture/DOP-AI-Visibility-Unified-Framework-v1.md.
Gitea git history — versioned audit runs + decisions (DR-00N).

7. Hardware (inference)

RTX 5090 (x2 planned) — primary inference; ~10 concurrent seats, 9B-param workload. Source: [[Call-2026-08-15-Tony]] §4.
RTX 3060 — current inference box (hold). Source: [[Call-2026-08-15-Tony]] §4.
RTX 1070 — toy for small models (LFM 2.5). Source: [[Call-2026-08-15-Tony]] §4.
A100 / EPYC — rack-server consideration (auction analysis). Source: [[Call-2026-08-15-Tony]] §4.

8. Monitoring / observability

Prometheus — stats instrumentation in the exe → token-footprint/speed dashboard. Source: [[Call-2026-08-15-Tony]] §4.

9. Templates (repo-authored)

Located across docs/templates/, docs/operations/templates/, docs/agents/, founding-partner-audit/, and gtm/outreach/. (Note: vault status.md §Project Structure references a flat veripath/templates/ directory that does not exist upstream.)

docs/agents/audit-findings-template.md — audit findings
docs/operations/templates/pre-call-owner-form.md — owner pre-call intake form
docs/templates/client-audit-delivery-email.md — client delivery email
docs/templates/data-inventory-template.md — data inventory
docs/templates/gbp-snapshot-intake.md — Google Business Profile snapshot intake
docs/templates/remediation-brief-template.md — remediation brief
docs/templates/requirements-template.md — requirements capture
docs/templates/threat-register-template.md — threat register
docs/templates/workflows-template.md — workflow template
founding-partner-audit/report-template.md — founding-partner audit report
gtm/outreach/top5-cold-audit-templates.md — cold-audit outreach templates

Open items

Reconcile research/bizl-com/42-tool-ai-scan.md, 43-tool-citation-audit.md, 44-tool-competitor-gap.md + docs/operations/visibility-stack-roadmap.md against §2–§3; fold in any material tools.
Document FreshRSS / RSSHub / FreeToken / Tailscale / Headscale / Vault Warden in the repo docs (currently live + call-transcript only).
Confirm BringFido / Bark.com are real review-source targets vs. call-transcript aspiration.
De-tokenize local Gitea remote (move to Vault Warden runtime lookup) — the embedded token must not ride in git history.
No index.md exists in this vault project folder yet → register this file (and the call note) once the crew creates one.

Owner / status: VeriPath crew maintains. This note was authored by Jimmy; treat sections 1, 3, 5, 7, 8 as live-probe/transcript-backed (re-verify services + URLs periodically), and §2, §4 as repo-backed.

7.1 KiB Raw Blame History