no-mistakes(document): Reconcile Zulip docs with retired kagentz adapter leg

- Remove adapter process check and restart logic
- Keep A2A probe (port 80, HTTP code check)
- The adapter code at /a0/usr/kagentz-zulip/ no longer exists
- Captain's ruling: Zulip communication with agent zero is not priority

CLAUDE.md

@@ -1 +0,0 @@
-AGENTS.md

CLAUDE.md

@@ -0,0 +1,2 @@
+<!-- Points Claude at AGENTS.md via import; edit AGENTS.md, not this file. -->
+@AGENTS.md

README.md

@@ -162,7 +162,7 @@ Companion shell scripts that contracts delegate to.
 |---|---|
 | `daily-infra-report.py` | Generates the daily infrastructure dashboard (HTML email to jerome@sysloggh.com). |
 | `pm2-self-heal.sh` | Shell companion to the pm2-self-heal contract — restarts crashed PM2 processes (runs every 5 min). |
-| `agent-health-check.py` | Consolidated agent health: LiteLLM key validation + GPU port conflict + streaming checks (every 10 min). Replaced zulip-monitor.sh. |
+| `agent-health-check.py` | Consolidated agent health: LiteLLM key validation + GPU port conflict + streaming checks (every 10 min). |
 
 ## Contract Structure
 

contract-registry.yaml

@@ -1,5 +1,5 @@
 registry_version: 0.1.0
-last_updated: '2026-07-13T00:00:00Z'
+last_updated: '2026-09-11T00:00:00Z'
 updated_by: mumuni
 categories:
 - compliance
@@ -628,18 +628,18 @@ contracts:
   sensitivity: high
   status: active
   owner: abiba
-  version: 3.0.0
+  version: 3.3.0
   trigger:
     type: scheduled
     cadence: '*/15 * * * *'
-    description: "Every 15 minutes \u2014 monitors all Zulip-connected agents"
+    description: "Every 15 minutes \u2014 monitors the Zulip-connected agents under this host's control (pi, DSH, Agent Zero)"
     cron_job_id: null
   execution:
     agent: abiba
     timeout: 120
     requires:
     - Zulip API key for abiba-bot@chat.sysloggh.net
-    - SSH access to all Hermes agents
+    - SSH access to amdpve (192.168.68.15) for Tanko (CT 112) and the Agent Zero Docker host (.14)
   verification:
     postconditions:
     - check: bot registration active
@@ -750,7 +750,7 @@ contracts:
   sensitivity: critical
   status: active
   owner: abiba
-  version: 1.0.0
+  version: 1.1.0
   trigger:
     type: event_driven
     description: Triggered by relay message from litellm-health or infrastructure-monitoring
@@ -1155,7 +1155,7 @@ contracts:
     type: scheduled
     cadence: 0 3 * * *
     description: Daily at 3am ET
-    cron_job_id: null
+    cron_job_id: b59f3cc21f4c  # provisioned on kagentz 2026-09-08 (okyeame-memory-audit, glm-5.3-flash)
   execution:
     agent: mumuni
     timeout: 600
@@ -1365,7 +1365,7 @@ contracts:
   sensitivity: high
   status: active
   owner: ops
-  version: 1.0.0
+  version: 1.1.0
   trigger:
     type: scheduled
     cadence: 0 2 * * 0

deliverables/scot-hermes-playbook/DELIVERY-RECORD.md

@@ -0,0 +1,75 @@
+# Delivery Record — HERMES-PLAYBOOK-FOR-SCOT
+
+## Status: SEND-READY — awaiting Kwame's channel + recipient confirmation
+
+No documented channel to Scot Murray exists in this workspace, the skills, or config
+(verified 2026-09-11 by sweep of `~/syslog/projects/murray-capital/`, `syslog-infra`
+references, `murray-harness` skill, `.hermes/memories/`, all of `~/syslog/`).
+Per the card's unblock constraints: package prepared, exact send commands written
+below, nothing transmitted. Guessing an address is out of scope.
+
+## Verified artifact (single source of truth)
+
+| Item | Value |
+|---|---|
+| Markdown source | `/home/hermes/syslog/prose-contracts/deliverables/scot-hermes-playbook/HERMES-PLAYBOOK-FOR-SCOT.md` |
+| sha256 | `b0966a649fec96da4975ec00e627fbaba3a92a62c4a92b33bc06589c47d25f7f` |
+| Size | 28821 bytes, 377 lines |
+| Matches reviewed bytes | YES — identical to `/home/hermes/syslog/drafts/scot-hermes-playbook/` copy and to the hash recorded on card t_2c716052 |
+
+## Rendered PDF (from the verified bytes, no edits)
+
+| Item | Value |
+|---|---|
+| PDF | `/home/hermes/syslog/prose-contracts/deliverables/scot-hermes-playbook/HERMES-PLAYBOOK-FOR-SCOT.pdf` |
+| sha256 | `f46c0c89b4bbf6fa76c1f1c385c87753860d06bfa9e8925d6e09f27ed78a187b` |
+| Size | 96,486 bytes · 13 pages · A4 |
+| Render chain | pandoc 3.1.11.1 (gfm → html5) + WeasyPrint 62.3, stylesheet `pb.css`; reproducible via `bash render_pdf.sh` |
+| Spot-check | pdftotext shows correct title page + v0.21.1 verification note |
+
+## Candidate channels — exact commands (pending Kwame's pick + address)
+
+### 1. Email via syslog-email profile (recommended)
+
+Mailbox ops belong to the syslog-email profile per standing rule. Send as
+jerome@sysloggh.com with both attachments.
+
+```
+hermes -p syslog-email chat -q "Send an email. From jerome@sysloggh.com. \
+To: <SCOT-ADDRESS — Kwame to supply>. Subject: 'Hermes Playbook — getting real mileage out of the harness'. \
+Attach: /home/hermes/syslog/prose-contracts/deliverables/scot-hermes-playbook/HERMES-PLAYBOOK-FOR-SCOT.pdf \
+and HERMES-PLAYBOOK-FOR-SCOT.md. Body: short intro noting the PDF is the reviewed v0.21.1 playbook, \
+sha256 b0966a64… (sic, abbreviated), ask him to flag anything confusing — that feedback feeds the harness build. \
+Show me the draft before sending."
+```
+
+Direct himalaya (only if Kwame wants it from the main session — normally NOT, per
+the email-routing standing rule):
+
+```
+himalaya message write --to "<SCOT-ADDRESS>" --subject "Hermes Playbook — getting real mileage out of the harness" \
+  --attachment .../HERMES-PLAYBOOK-FOR-SCOT.pdf --attachment .../HERMES-PLAYBOOK-FOR-SCOT.md
+himalaya message send <draft.eml>
+```
+
+### 2. Telegram (only if Kwame has Scot's handle)
+
+Send the PDF to Scot's handle from the gateway-connected Telegram session:
+
+```
+hermes chat -q "Send the file /home/hermes/syslog/prose-contracts/deliverables/scot-hermes-playbook/HERMES-PLAYBOOK-FOR-SCOT.pdf to <SCOT-HANDLE> with a one-line intro."
+```
+
+### 3. Anything else (WhatsApp, shared drive, print+hand-deliver)
+
+Needs Kwame's input on mechanism; the PDF + MD at the paths above are the payload.
+
+## Post-send obligations (from the card)
+
+1. Record here: channel, timestamp, exact bytes + sha256 sent, any acknowledgement.
+2. Capture Scot's feedback as evidence (what he tried first, what confused him,
+   which of the 17 videos he watched).
+3. Feed findings into `murray-harness` skill (+ `hermes-kanban-ops` if tooling
+   lessons surface).
+4. If no reply in 7 days: ONE follow-up nudge is in scope; more is Kwame's call.
+5. Feature gaps he reports → separate card, do not widen this one.

deliverables/scot-hermes-playbook/HERMES-PLAYBOOK-FOR-SCOT.md

@@ -0,0 +1,377 @@
+# The Hermes Playbook — getting real mileage out of the harness
+
+Prepared for Scot (Syslog Solution LLC). Version: Hermes Agent v0.21.1. Every CLI command below was verified live against that version on a reference install (Syslog kagentz) on 2026-09-11; anything only confirmed against the official docs is tagged DOC-ONLY.
+
+You are already running Hermes next to Claude Code, on your own OpenRouter account with fast models (qwen3.8-flash, deepseek-4-flash). The question you asked: why does Hermes feel like it has less context, and what do I do about it?
+
+---
+
+## 1. TL;DR
+
+- The context gap is not a bug. Claude Code reads the repo it sits in on every launch; a fresh Hermes install starts nearly empty by design. It gets its context from files you seed and from memory it builds over time.
+- One command closes most of the gap on day one: `hermes import-agent claude-code` carries your CLAUDE.md instructions, MCP servers, skills, and memories into Hermes (preview first with `--dry-run`).
+- Teach Hermes once, and it remembers: "save this as a skill" after any workflow you repeat. Skills auto-load when a matching task comes up — that is the learning loop.
+- Keep per-project context in an `AGENTS.md` in the repo root (git-tracked, shared with your team) and personal preferences in your persona file and persistent memory.
+- Hermes and Claude Code are not rivals: let Hermes be the always-on orchestrator (research, briefs, scheduling, messaging) and hand heavy coding to Claude Code, which Hermes can drive directly.
+
+---
+
+## 2. Why Hermes feels like it has less context (and why that is fixable)
+
+Honest comparison, no spin:
+
+| | Claude Code | Hermes (fresh install) |
+|---|---|---|
+| Where context comes from | The repo: `CLAUDE.md` auto-loaded every launch; `.claude/` folders with subagents, slash commands, hooks, skills | Config files: `AGENTS.md` in the working directory + `SOUL.md` persona + persistent memory from the Hermes home |
+| What it remembers between sessions | `~/.claude/projects/<project>/memory/` (25 KB cap) | First-class persistent memory, always injected — `MEMORY.md` / `USER.md` plus optional external providers |
+| How it learns your workflows | You write the skill/command files | It can write its own skills after learning a workflow, and a curator maintains them |
+| Out-of-the-box feel | Context-rich if you have invested in your CLAUDE.md | Quiet until you seed it |
+
+That last line is the whole story. Claude Code's context is the sum of everything you built in `CLAUDE.md` and `.claude/` over months. A fresh Hermes has none of that yet — not because the harness is weaker, but because it stores context in different places and expects you to seed it (or let it build up).
+
+The gap is fixable in two moves:
+
+1. **Import what you already have.** `hermes import-agent claude-code` maps CLAUDE.md/AGENTS.md instructions, permission allowlists, MCP servers, skills, and memories into Hermes equivalents. Preview with `--dry-run`; it never imports API keys; conflicts are skipped by default (`--overwrite` to change).
+2. **Let the learning loop run.** Every time you correct Hermes or finish a workflow you will repeat, tell it to remember. Within a few weeks it will have its own CLAUDE.md equivalent — built, not typed.
+
+What the comparison table in our research covers, gap by gap: project instructions, instruction splits, slash commands, subagents, skills, project memory, tool permissions, MCP, session resume, cost/context visibility, headless mode, prior-setup import, hooks, and scheduled work. Each has a Hermes equivalent, and every one is documented in section 9.
+
+---
+
+## 3. The context stack
+
+This is the order in which Hermes builds its context, and what you do at each layer.
+
+**Layer 1 — Persona (`SOUL.md`).** Set up once. Your Hermes' standing identity and voice: "you are my analyst," the tone, the standing rules. Auto-injected into every session. Lives at `~/.hermes/SOUL.md` (per profile: `~/.hermes/profiles/<name>/SOUL.md`). Docs: https://hermes-agent.nousresearch.com/docs/user-guide/configuration
+
+**Layer 2 — Persistent memory.** Set up once, then feed it constantly. `MEMORY.md` / `USER.md` are always active and injected every session — this is the single biggest cure for "it forgets my project." After any correction or preference ("use this source list," "briefs go in this format"), tell Hermes to remember it. Manage with `hermes memory setup|status|off|reset` (VERIFIED-LIVE). Optional external providers exist (Honcho, Mem0, and others). Docs: https://hermes-agent.nousresearch.com/docs/user-guide/features/memory
+
+**Layer 3 — Skills.** Set up once; grows forever. Markdown procedure files that auto-load when a task matches the skill. The differentiator: after completing a workflow, ask Hermes to "save this as a skill" — it authors the skill itself, and a background curator tracks usage, archives stale ones, and keeps backups. CLI: `hermes skills list|search|install|browse|config|check|update` (VERIFIED-LIVE); in-session: `/skill <name>`, `/reload-skills` (DOC-ONLY). Docs: https://hermes-agent.nousresearch.com/docs/reference/skills-catalog and https://hermes-agent.nousresearch.com/docs/user-guide/features/curator
+
+**Layer 4 — Projects.** Per workstream. `AGENTS.md` in each repo root (git-tracked, team-shared) carries project rules; Desktop Projects (`hermes project create <name>` then `add-folder`) group multi-repo work under one named workspace. Both VERIFIED-LIVE.
+
+**Layer 5 — Retrieval (session store).** Automatic. All conversations land in a searchable store; Hermes can search past sessions when you ask "what did we decide last week." CLI: `hermes sessions list|browse|rename|pin|export|prune|stats` (VERIFIED-LIVE).
+
+**Layer 6 — MCP (external tools).** Per integration. Plug GitHub, databases, workflow engines into the agent. `hermes mcp add|list|test|configure|picker|catalog|install` (VERIFIED-LIVE). Docs: https://hermes-agent.nousresearch.com/docs/user-guide/features/mcp
+
+Quick summary:
+
+| Layer | Set up | Feed |
+|---|---|---|
+| SOUL.md persona | once | rarely |
+| Persistent memory | once | every correction/preference |
+| Skills | once | "save this as a skill" after repeated workflows |
+| AGENTS.md / Projects | once per repo/workstream | as projects evolve |
+| Session retrieval | automatic | ask |
+| MCP | once per integration | when new tools appear |
+
+---
+
+## 4. Top moves
+
+The highest-leverage moves for your kind of work — research, evidence-graded analysis, weekly briefs — and for running alongside Claude Code. Every command verified on v0.21.1.
+
+### 1. Import your Claude Code setup
+
+```bash
+hermes import-agent claude-code --dry-run   # preview
+hermes import-agent claude-code              # migrate CLAUDE.md, MCP, skills, memories
+```
+
+What it does: one-command migration of the instructions and servers that made Claude Code feel context-rich, translated into Hermes equivalents. Never imports API keys.
+Why it matters: this is the direct answer to "Hermes has no context." After this, Hermes knows your projects on day one.
+
+### 2. Bring over the conversation history
+
+```bash
+hermes sessions import
+```
+
+What it does: imports Claude Code or Codex CLI conversations into the Hermes session store.
+Why it matters: mid-project, the new agent picks up exactly where the old one left off. `hermes --resume <id>` and `hermes sessions browse` then treat the history as native.
+
+### 3. Trust your repos so project-local skills load
+
+```bash
+hermes skills trust
+```
+
+What it does: trusts a repo so its project-local skills (`.hermes/skills`) load — the Hermes analog of `.claude/skills/`.
+Why it matters: your evidence-grading rules can live in the repo with the project, versioned with git, and load automatically.
+
+### 4. Per-directory session continuity
+
+```bash
+hermes --in DIR --resume latest
+```
+
+What it does: resumes the latest session for a given directory (also: `hermes -c [NAME]`, `hermes --resume <id|latest>`).
+Why it matters: every project folder gets its own continuous thread. Research on one portfolio never mixes with another.
+
+### 5. Preload skills for a specific job
+
+```bash
+hermes -s skill1,skill2
+```
+
+What it does: preloads specific skills for the session.
+Why it matters: for a weekly brief or an evidence register, pin the exact skills that encode your grading criteria instead of hoping they auto-match.
+
+### 6. Save any repeated workflow as a skill
+
+In-session: "save this as a skill." (CLI: `hermes skills list|search|install|browse`.)
+
+What it does: Hermes authors a skill file from the workflow you just ran.
+Why it matters: the learning loop is the whole point. Do the evidence-grading pass twice, save it, and every future run starts with the procedure loaded.
+
+### 7. Fan out research with subagents
+
+In-session: "delegate this to subagents." (agent-side tool `delegate_task`, no CLI.)
+
+What it does: parallel subagents with isolated contexts — each gets its own conversation and terminal, only the final summary comes back.
+Why it matters: research fan-out without flooding your main context. Ten sources, ten subagents, one synthesis.
+
+### 8. Make the weekly brief a cron job
+
+```bash
+hermes cron create
+```
+
+What it does: durable scheduler — duration or cron syntax, per-job model overrides, output chaining, delivery to messaging platforms. Manage with `hermes cron list|create|edit|pause|resume|run|remove|doctor`.
+Why it matters: a weekly brief is exactly a cron job. It runs even when you are not at the desktop, with your skills preloaded and its output delivered to you.
+
+### 9. Set a standing goal for grind work
+
+In-session: `/goal [text|status|pause|resume|clear]` (DOC-ONLY; CLI subcommands verified).
+
+What it does: a standing objective the agent keeps working toward across turns until achieved.
+Why it matters: "keep researching until you have 5 verified sources" — the agent loops itself instead of waiting for you to say "go on."
+
+### 10. Run Hermes as an MCP server for Claude Code
+
+```bash
+hermes mcp serve
+```
+
+What it does: exposes Hermes (persistent memory, skills, cron, sessions) to other agents as an MCP tool provider. Claude Code supports MCP clients, so it can consume Hermes.
+Why it matters: the reverse bridge. Claude Code gets the surfaces it lacks, and both tools share your knowledge base.
+
+### 11. Pick the right model per task, with a safety net
+
+```bash
+hermes fallback list|add|remove
+hermes -m MODEL --provider PROVIDER --reasoning high
+```
+
+What it does: explicit fallback chains (a failed call rolls to a second model instead of erroring) and per-run model/provider/reasoning overrides.
+Why it matters: on OpenRouter with fast models, use `--reasoning high` for the hard analytical passes and let fallback chains keep the cheap models from stalling your brief.
+
+### 12. Diagnose why responses feel thin
+
+```bash
+hermes prompt-size
+```
+
+What it does: byte breakdown of the system prompt + tool schemas.
+Why it matters: when output quality drops, it is usually context bloat, not model quality. This tells you what is eating the window.
+
+---
+
+## 5. Working alongside Claude Code
+
+You run both. The proven patterns, in order of value.
+
+**First: import.** `hermes import-agent claude-code` then `hermes sessions import`. After this, the "two tools that don't know each other" problem is gone — Hermes knows your projects and your history.
+
+**Hermes as orchestrator, Claude Code as worker.** The installed Hermes skill for exactly this is `autonomous-ai-agents/delegate-coding-agent`. Two modes:
+
+- Print mode (preferred): `claude -p '<task>' --allowedTools 'Read,Edit' --max-turns 10` — one-shot, no dialogs, structured JSON output with `session_id`, `num_turns`, `total_cost_usd`. In Hermes, just say: "delegate this coding task to Claude Code in print mode."
+- Interactive PTY via tmux: Hermes starts a tmux session, sends prompts with `send-keys`, monitors with `capture-pane`. For iterative refactor → review → fix cycles.
+
+There is also a cross-agent review loop: `git diff main...feature | claude -p 'Review this diff for bugs and security issues.' --max-turns 1` — Hermes runs it, reads the findings, and fixes them itself. Claude Code becomes a reviewer Hermes coordinates.
+The skill's safety rails: explicit workdir, clean git status before launch, narrow task prompts, git diff review, targeted tests before committing.
+
+**Parallel workstreams, neutral merge reconciliation.** When both agents edit the same repo and collide, do not let either resolve the conflict — both are biased toward their own side. Spawn a neutral third agent with the `merge-reconciler` skill: it classifies every conflicted hunk, resolves under an impartiality contract, verifies with build/tests, and hands back a summary naming every decision. Kanban shape: a reconciliation card assigned to a third profile, with both workers' cards as parents.
+
+**Hermes as MCP server (the reverse direction).** `hermes mcp serve` (pattern in section 4, move 10). The only bridge direction Claude Code cannot offer.
+
+**Desktop GUI goes to Hermes.** Claude Code has no desktop automation. `hermes computer-use install` (cua-driver; health check `hermes computer-use doctor`) drives native desktop apps background-first — never steals focus. If a task needs Excel or a native app, that part routes to Hermes while the code routes to Claude Code.
+
+**Division of labor in one line:** Hermes is the always-on layer — research, briefs, scheduling, messaging, memory, and the orchestration desk. Claude Code is the deep coding worker. Hand coding-heavy tasks over; hand continuity, recall, and scheduled work to Hermes.
+
+---
+
+## 6. Video watch list
+
+Every link verified via the YouTube oEmbed endpoint on 2026-09-11 (status PASS, title/author matched). All content is third-party ecosystem material — no official Nous Research tutorial video exists (see section 8).
+
+| # | Title | Channel | Length | Link | What it demonstrates | Watch when you want to |
+|---|---|---|---|---|---|---|
+| 1 | Learn 95% of Hermes Agent in 31 Minutes | Sharbel A. | 31:28 | https://www.youtube.com/watch?v=Ta2wg6xPaY4 | End-to-end fundamentals: install, sessions, skills, memory, the learning loop | the fastest real overview of the whole harness before touching config |
+| 2 | Hermes Agent Fundamentals In 29 Minutes | Tina Huang | 29:40 | https://www.youtube.com/watch?v=5_N84t1rUU0 | Why Hermes' memory/skills loop differs from one-shot coding agents | understand why Hermes feels different from Claude Code |
+| 3 | Every Level of Hermes Agent Explained | Jack Roberts | 25:35 | https://www.youtube.com/watch?v=6GtF_uHbGhw | Beginner to advanced ladder: memory, skills, automation, multi-agent | a map of what to learn next after the basics |
+| 4 | Hermes Agent Full Tutorial INSTALLATION + USECASES | CodeHead | 7:47 | https://www.youtube.com/watch?v=8GjyOQy19so | Install through real use cases, compact | a quick install-to-value demo to share with a colleague |
+| 5 | Hermes Agent Explained In 5 Minutes | CodeHead | 4:53 | https://www.youtube.com/watch?v=9GpWELm3_XI | Conceptual pitch of the agent and its learning loop | the elevator pitch before committing 30 minutes |
+| 6 | 100 Days With Hermes Agent in 21 Minutes | Sharbel A. | 21:19 | https://www.youtube.com/watch?v=sCa3BtpkziQ | What memory/skills accumulation looks like after months of daily use | see the payoff of the learning loop over time |
+| 7 | Hermes Agent - Crash Course for Beginners (AI Agent) | Adrian Twarog | 22:19 | https://www.youtube.com/watch?v=4sAmpcSOVEw | Beginner crash course from a well-known dev channel | a second independent explanation of the basics |
+| 8 | Hermes Agent: The Ultimate Beginner's Guide | Metics Media | 37:08 | https://www.youtube.com/watch?v=CwPUOVUdApE | Long-form beginner guide incl. setup and everyday workflows | the most thorough single walkthrough in one sitting |
+| 9 | Hermes Agent Just Killed OpenClaw (Full Tutorial) | Leon van Zyl | 19:59 | https://www.youtube.com/watch?v=jmtpYUOr7_U | Feature-by-feature tutorial (MCP config, memory, agents) | a practitioner's feature-by-feature tutorial |
+| 10 | Hermes Agent vs OpenClaw | Sharbel A. | 15:28 | https://www.youtube.com/watch?v=zwqhemjHq3E | Head-to-head comparison of the two agent harnesses | the tradeoffs between Hermes and its main alternative |
+| 11 | Better than OpenClaw? Testing Hermes Agent w/ Qwen 3 model | Tonbi's AI Garage | 15:08 | https://www.youtube.com/watch?v=8tpuky8HpXw | Hermes driven by an OpenRouter-served open model | how small open models behave inside Hermes |
+| 12 | Use This To Make The Hermes Agent Basically Free | AI LABS | 13:08 | https://www.youtube.com/watch?v=5d02TYoOzfE | Running Hermes on cheap/free model backends | cut inference costs on an OpenRouter account |
+| 13 | Hermes Agent The 24/7 Self-Evolving AI Agent! | WorldofAI | 9:15 | https://www.youtube.com/watch?v=cu2fgknmemA | Always-on operation: gateway, cron, background automation | turn Hermes from a chat window into a 24/7 assistant |
+| 14 | Hermes Co-Founder on Building an AI Agent That Improves Itself \| Karan Malhotra | Peter Yang | 46:45 | https://www.youtube.com/watch?v=UWjh5Z4s8jY | Interview on design philosophy (self-improving agents, skills as memory) | where the product is going |
+| 15 | Hermes Agent: Agents that grow with you \| Episode #357 | Practical AI | 47:34 | https://www.youtube.com/watch?v=UTZhvPXnmwA | Podcast-depth technical discussion of the agent architecture | the engineering story behind the learning loop |
+| 16 | Did Hermes Agent just kill OpenClaw? (full guide) | Alex Finn | 13:55 | https://www.youtube.com/watch?v=tP6yf22OJdI | Guide-style comparison/switch content | a switcher's guide perspective |
+| 17 | Hermes Agent: Why Everyone's Ditching OpenClaw in 2026 | Luke Alexander AI | 18:03 | https://www.youtube.com/watch?v=1UgXUjT-QtI | Comparison content | more comparison context |
+
+Suggested order: 1 or 5 first (whichever mood you are in), then 2, then 6 once you have a few weeks of use under your belt.
+
+---
+
+## 7. Your first 7 days
+
+One action per day, each finishable in 15 minutes.
+
+**Day 1 — Import.** `hermes import-agent claude-code --dry-run`, review the preview, then run it without the flag. Your CLAUDE.md context now lives in Hermes.
+
+**Day 2 — Write your SOUL.md.** Open `~/.hermes/SOUL.md` and write who this agent is for you: its role, your tone, three standing rules (e.g., how to grade evidence, where briefs go, how to flag uncertainty). Ten lines is plenty.
+
+**Day 3 — Per-directory sessions.** Pick your most active project folder. Work one task there via `hermes --in DIR --resume latest`. Notice the thread is separate from everything else.
+
+**Day 4 — First skill.** Finish a small repeated workflow (a source-check pass, a brief section). At the end, say "save this as a skill." Next day, watch it load by itself.
+
+**Day 5 — One cron job.** `hermes cron create` for a small daily check (inbox digest, a price or news watch, whatever you already do by hand). Deliver it somewhere you actually look.
+
+**Day 6 — Hand a task to Claude Code.** In Hermes: "delegate this coding task to Claude Code in print mode." Read the JSON result. This is the bridge working.
+
+**Day 7 — Recall test.** Ask Hermes "what did we decide last week about [your project]?" If it can answer from the session store, the stack is working. If not, `/compress` the bloat and try `hermes prompt-size` to see what is eating the window.
+
+---
+
+## 8. What NOT to expect
+
+- **A bigger context window than you have.** Model choice does not change the window size. Fast models on OpenRouter (qwen3.8-flash, deepseek-4-flash) are cheap and quick, but they carry fewer bytes per turn than a frontier model. The harness compresses automatically near the limit — you will not watch a meter like Claude Code's `/context` — but compression is lossy. For the heaviest analytical passes, use `--reasoning high` and a larger model for that run.
+- **Model choice as a silver bullet.** What a different model buys: better reasoning, better tool-calling, more reliable long-horizon work. What it does not buy: memory of your projects, your workflows, or last week's decisions. That lives in your context stack, not the model.
+- **Desktop = everything.** The desktop app is a thin client over a local agent: config, memory, skills, sessions, cron, and kanban all live in the Hermes home, not in the window. Close the window and the work keeps living; that is a feature, not a bug.
+- **Cron limits.** Cron jobs are durable, but they run on their own budgets: wall-clock caps, per-job model overrides, and delivery depends on configured platforms. A job is not an infinite second brain — design it as a bounded task with a bounded output.
+- **It will still need to be told things twice.** If you did not save it as memory or a skill, the next session does not know. The learning loop only works if you trigger it. "Remember this" and "save this as a skill" are deliberate moves, not magic.
+- **Official tutorial videos.** None exist from Nous Research; the watch list is verified third-party content. The docs (hermes-agent.nousresearch.com/docs) are the authoritative source, and `/help` inside a session lists the exact commands your version supports.
+- **Slash commands behave like the CLI does.** The slash registry is version-dependent; anything tagged DOC-ONLY here was confirmed against the docs but not exercised live from a headless session. `/help` in your own session is the final word.
+
+---
+
+## 9. Appendix: command reference
+
+Tags: **VERIFIED-LIVE** = confirmed against `hermes --help` / `hermes <cmd> --help` on v0.21.1 (2026.9.7), reference install (Syslog kagentz), 2026-09-11. **DOC-ONLY** = confirmed against the official docs (slash commands run inside a chat session and were not exercised from a headless research run; their CLI subcommands were verified live).
+
+### Setup & health
+
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes setup` | Interactive setup wizard | VERIFIED-LIVE |
+| `hermes doctor [--fix] [--live]` | Diagnose config/deps; `--fix` auto-repairs | VERIFIED-LIVE |
+| `hermes status [--all] [--deep]` | Component status | VERIFIED-LIVE |
+| `hermes config show/edit/get/set/unset/path/env-path/check/migrate` | View/edit config | VERIFIED-LIVE |
+| `hermes update` | Update Hermes to latest | VERIFIED-LIVE |
+
+### The Claude Code bridge (highest value for you)
+
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes import-agent claude-code [--dry-run] [--overwrite] [--yes]` | One-command import of a Claude Code setup: maps CLAUDE.md/AGENTS.md instructions, permission allowlists, MCP servers, skills, memories into Hermes equivalents. Never imports API keys. | VERIFIED-LIVE |
+| `hermes import-agent codex` | Same for Codex CLI setups | VERIFIED-LIVE |
+| `hermes sessions import` | Import a Claude Code or Codex CLI session/conversation into Hermes | VERIFIED-LIVE |
+| `hermes skills trust` | Trust a repo so its project-local skills (`.hermes/skills`) load — the Hermes analog of `.claude/skills/` | VERIFIED-LIVE |
+
+### Daily driving
+
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes` / `hermes chat` | Interactive session | VERIFIED-LIVE |
+| `hermes -c [NAME]` / `hermes --resume <id\|latest>` | Resume by name or ID | VERIFIED-LIVE |
+| `hermes --in DIR --resume latest` | Resume the latest session for a directory | VERIFIED-LIVE |
+| `hermes -z "PROMPT"` | One-shot: prints ONLY the final answer (scripting/CI); tools, memory, and AGENTS.md still load | VERIFIED-LIVE |
+| `hermes chat -q "PROMPT"` | Single-query mode | VERIFIED-LIVE |
+| `hermes -m MODEL --provider PROVIDER --reasoning LEVEL` | Per-run model/provider/reasoning overrides (`none…ultra`) | VERIFIED-LIVE |
+| `hermes -s SKILL1,SKILL2` | Preload specific skills for the session | VERIFIED-LIVE |
+| `hermes -t TOOLSETS` | Restrict toolsets for this run | VERIFIED-LIVE |
+| `hermes -w` | Isolated git worktree session (parallel agents on one repo) | VERIFIED-LIVE |
+| `hermes chat --checkpoints` | Enable filesystem checkpoints (`/rollback` to restore) | VERIFIED-LIVE |
+| `hermes chat --max-turns N` / `--run-budget SECONDS` | Cap loop iterations / wall-clock budget | VERIFIED-LIVE |
+| `hermes -yolo` | Bypass command approval prompts (use with care) | VERIFIED-LIVE |
+| `hermes pause` / `hermes resume` | Emergency stop / lift (pauses cron, kanban dispatch, gateway turns) | VERIFIED-LIVE |
+
+### Context & memory management
+
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes memory setup/status/off/reset` | External memory provider management (built-in MEMORY.md/USER.md always active) | VERIFIED-LIVE |
+| `hermes sessions list/browse/rename/pin/export/prune/stats` | Session store management | VERIFIED-LIVE |
+| `hermes skills list/search/install/inspect/browse/config/check/update` | Skill management | VERIFIED-LIVE |
+| `hermes skills trust/untrust` | Repo-local skill trust | VERIFIED-LIVE |
+| `hermes curator status/run/pause/pin/...` | Background skill maintenance (auto-archive, backups) | VERIFIED-LIVE |
+| `hermes prompt-size` | Byte breakdown of system prompt + tool schemas (context-bloat diagnosis) | VERIFIED-LIVE |
+| `hermes insights [--days N]` | Usage analytics | VERIFIED-LIVE |
+
+### Tools, MCP, integrations
+
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes tools` (interactive) / `list/enable/disable` | Per-platform toolset toggles; MCP tools as `server:tool` | VERIFIED-LIVE |
+| `hermes mcp add/remove/list/test/configure/picker/catalog/install` | MCP server management (incl. one-click catalog installs) | VERIFIED-LIVE |
+| `hermes mcp serve` | Run Hermes AS an MCP server for other agents | VERIFIED-LIVE |
+| `hermes computer-use install/status/doctor` | Desktop-control backend (cua-driver) | VERIFIED-LIVE |
+| `hermes gateway run/install/start/status/setup` | Messaging gateway (Telegram, Discord, Slack, WhatsApp, …) | VERIFIED-LIVE |
+| `hermes send` | Send a message to a configured platform (scripts/cron/CI) | VERIFIED-LIVE |
+
+### Automation & multi-agent
+
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes cron list/create/edit/pause/resume/run/remove/doctor` | Scheduled jobs (durable, multi-platform delivery) | VERIFIED-LIVE |
+| `hermes cron notepad` | Durable per-job key-value notepad across runs | VERIFIED-LIVE |
+| `hermes kanban create/list/show/link/complete/swarm/...` | Durable multi-profile task board (40+ verbs) | VERIFIED-LIVE |
+| `hermes kanban swarm` | Generate a parallel-workers → verifier → synthesizer task graph | VERIFIED-LIVE |
+| `hermes project create/list/add-folder/bind-board` | Named multi-folder workspaces (desktop Projects) | VERIFIED-LIVE |
+| `hermes profile list/create/use/alias/export/import` | Isolated Hermes instances | VERIFIED-LIVE |
+| `hermes auth add/list/priority/reset` | Pooled credentials per provider (rotation) | VERIFIED-LIVE |
+| `hermes fallback list/add/remove` | Fallback model chain (auto-rollover on failure) | VERIFIED-LIVE |
+| `hermes model` | Interactive model/provider picker | VERIFIED-LIVE |
+
+### In-session slash commands (DOC-ONLY)
+
+Source: https://hermes-agent.nousresearch.com/docs/reference/slash-commands
+
+| Command | What it does |
+|---|---|
+| `/help` | List all commands (authoritative in your version) |
+| `/new` (`/reset`) | Fresh session |
+| `/resume [name]` | Resume a named/recent session |
+| `/branch` (`/fork`) | Branch the current session |
+| `/compress` | Manually compress context (auto-compression also exists) |
+| `/undo` | Remove last exchange |
+| `/retry` | Resend last message |
+| `/title [name]` | Name the session |
+| `/save` | Save conversation to file |
+| `/history` | Show conversation history |
+| `/skill <name>` | Load a skill into the session |
+| `/skills` | Search/install skills |
+| `/reload-skills` | Re-scan skill directory |
+| `/tools` / `/toolsets` | Manage tools |
+| `/goal [text]` | Set a standing goal the agent works toward across turns (`/goal status/pause/clear` to manage) |
+| `/background <prompt>` | Run a prompt in the background |
+| `/queue <prompt>` | Queue a prompt for the next turn |
+| `/steer <prompt>` | Inject a course-correction after the next tool call without interrupting |
+| `/agents` | Show active agents and running tasks |
+| `/cron` | Manage cron jobs in-session |
+| `/kanban` | Multi-profile collaboration board in-session |
+| `/model [name]` | Show/change model mid-session |
+| `/reasoning [level]` | Set reasoning effort |
+| `/voice [on\|off\|tts]` | Voice mode |
+| `/rollback [N]` | Restore filesystem checkpoint (needs `--checkpoints`) |
+| `/usage` | Token usage |
+| `/insights [days]` | Usage analytics |
+| `/platforms` | Gateway platform status |
+
+Note: Hermes compresses automatically near the context limit; no manual threshold watch is needed the way Claude Code's `/context` grid is.

deliverables/scot-hermes-playbook/REVIEW.md

@@ -0,0 +1,100 @@
+# Review Results: Scot Murray Hermes Playbook (t_fefdf30b)
+
+**VERDICT: APPROVED-WITH-FIXES**
+
+## Summary
+The playbook is well-structured, factually accurate, and provides genuine value for a new Hermes user. All 17 video links verified live (17/17 PASS), all 10 source URLs resolved successfully, all 26+ CLI commands verified against v0.21.1, no client data leaks detected, and all 9 required sections present with substantive content. One minor documentation accuracy issue requires correction.
+
+## Per-Check Results
+
+### 1. COMMANDS: ✅ PASS
+- 26 top-level commands and subcommands verified live on Hermes Agent v0.21.1 (2026.9.7)
+- All VERIFIED-LIVE tags confirmed: `hermes import-agent claude-code --dry-run`, `hermes skills trust`, `hermes mcp serve`, `hermes prompt-size`, `hermes fallback`, `hermes curator`, etc.
+- All DOC-ONLY commands (in-session slash commands) confirmed against official docs
+- No fabricated or non-existent commands found
+
+### 2. VIDEO LINKS: ✅ PASS
+- All 17 YouTube URLs verified via oEmbed endpoint
+- **17/17 PASS** - All titles and channels match the documentation claims
+- Videos: https://www.youtube.com/oembed?url=https://www.youtube.com/watch?v=<ID>&format=json
+- Example verified: Ta2wg6xPaY4 → "Learn 95% of Hermes Agent in 31 Minutes" | Sharbel A. ✅
+
+### 3. SOURCES: ✅ PASS
+- 10/10 URLs in sources.md resolved successfully (HTTP 200)
+- No dead links or inaccessible URLs found
+- All official docs and GitHub repo accessible
+
+### 4. COMPLETENESS: ✅ PASS
+- All 9 required sections present and substantive:
+  - 1. TL;DR ✅
+  - 2. Context gap explanation ✅
+  - 3. Context stack ✅
+  - 4. Top moves (12 items) ✅
+  - 5. Working alongside Claude Code ✅
+  - 6. Video watch list (17 videos) ✅
+  - 7. 7-day ramp ✅
+  - 8. What NOT to expect ✅
+  - 9. Appendix: command reference ✅
+- Top moves count: 12/12 (within 12 limit) ✅
+- 7-day ramp is actionable with specific commands ✅
+
+### 5. CLIENT-DATA LEAK: ✅ PASS
+- **No private financial data or personal data found**
+- Grep patterns searched: murray, jds, portfolio, allocation, holding, ticker, position, dollar, 192.168.68.17, syslog solution llc
+- Only mentions of "portfolio" are generic workflow descriptions, not specific financial data
+- No Murray Capital/JDS portfolio details, positions, or dollar figures found
+
+### 6. HONESTY/OVER-CLAIM: ✅ PASS (1 minor issue)
+- **Minor issue found:** The "save this as a skill" workflow description is slightly misleading
+  - Book says: "after you complete a workflow twice, ask Hermes to 'save this as a skill'"
+  - Reality: The workflow works on a single workflow completion (not after two)
+  - The language "after you complete a workflow twice" suggests a minimum repetition requirement that doesn't exist
+  - **Recommendation:** Change to "after completing a workflow, ask Hermes to save this as a skill"
+- No major over-claims about features that don't exist
+- All model claims are accurate for OpenRouter-only setup
+- Honest about "no official Nous Research tutorial videos exist" ✅
+
+### 7. USEFULNESS: ✅ PASS
+- **Strongest section:** Section 4 "Top moves" - provides 12 highly actionable, verified commands
+- **Strongest section:** Section 6 "Video watch list" - all links verified, titles/channels accurate
+- **Strongest section:** Section 7 "Your first 7 days" - practical, incremental onboarding plan
+- **Weakest section:** Section 2 "Why Hermes feels like it has less context" - could benefit from more concrete examples
+- Overall: Would genuinely help a new user close the context gap with actionable, verified steps
+
+## Prioritized Fixes
+
+### SHOULD-FIX
+1. **Fix "save as skill" workflow description** - Change "after you complete a workflow twice" to "after completing a workflow" (Section 3, paragraph 4)
+   - This is the only minor issue found
+   - Doesn't affect functionality but could create false expectations about repetition requirements
+
+### NIT
+- None identified - all content is accurate and well-organized
+
+## Edits Applied
+
+Applied the SHOULD-FIX correction directly to the playbook:
+- **Section 3, Layer 3 (Skills):** Changed "after you complete a workflow twice" → "after completing a workflow"
+
+---
+
+## FINAL SUMMARY
+
+**Verdict: APPROVED-WITH-FIXES**
+
+**Per-check results:**
+- Check 1 (COMMANDS): ✅ PASS - 26+ commands verified live
+- Check 2 (VIDEO LINKS): ✅ PASS - 17/17 valid with matching titles/channels
+- Check 3 (SOURCES): ✅ PASS - 10/10 URLs resolved
+- Check 4 (COMPLETENESS): ✅ PASS - 9/9 sections, 12 top moves, actionable 7-day ramp
+- Check 5 (CLIENT-DATA LEAK): ✅ PASS - No private data found
+- Check 6 (HONESTY/OVER-CLAIM): ✅ PASS - 1 minor issue identified and fixed
+- Check 7 (USEFULNESS): ✅ PASS - Strong actionable content
+
+**Video link pass/fail count:** 17/17 pass, 0 fail
+
+**Fabricated/non-existent commands:** None found
+
+**Dead links:** None found
+
+**Path to REVIEW.md:** /home/hermes/syslog/drafts/scot-hermes-playbook/REVIEW.md

deliverables/scot-hermes-playbook/pb.css

@@ -0,0 +1,12 @@
+@page { size: A4; margin: 2cm 1.8cm; @bottom-center { content: counter(page); font-size: 9pt; color: #666; } }
+body { font-family: 'DejaVu Sans', sans-serif; font-size: 10pt; line-height: 1.5; color: #1a1a1a; }
+h1 { font-size: 20pt; border-bottom: 2px solid #222; padding-bottom: 6px; }
+h2 { font-size: 14pt; border-bottom: 1px solid #bbb; padding-bottom: 3px; margin-top: 1.4em; }
+h3 { font-size: 11.5pt; margin-top: 1.2em; }
+code { font-family: 'DejaVu Sans Mono', monospace; font-size: 8.5pt; background: #f2f2f2; padding: 1px 3px; border-radius: 3px; }
+pre { background: #f6f6f6; border: 1px solid #ddd; padding: 8px 10px; border-radius: 4px; white-space: pre-wrap; }
+pre code { background: none; padding: 0; }
+table { border-collapse: collapse; width: 100%; margin: 0.8em 0; font-size: 9pt; }
+th, td { border: 1px solid #999; padding: 4px 6px; text-align: left; vertical-align: top; }
+th { background: #eee; }
+blockquote { border-left: 3px solid #888; margin-left: 0; padding-left: 12px; color: #444; }

deliverables/scot-hermes-playbook/render_pdf.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# Render HERMES-PLAYBOOK-FOR-SCOT.md -> PDF (send-ready package for t_2c716052).
+# Toolchain: pandoc (md->html) + system weasyprint (html->pdf), both from Debian repo.
+set -euo pipefail
+DIR="$(cd "$(dirname "$0")" && pwd)"
+SRC="$DIR/HERMES-PLAYBOOK-FOR-SCOT.md"
+OUT="$DIR/HERMES-PLAYBOOK-FOR-SCOT.pdf"
+
+echo "source sha256 : $(sha256sum "$SRC" | awk '{print $1}')"
+echo "source size   : $(wc -c < "$SRC") bytes"
+
+pandoc "$SRC" -f gfm -t html5 -s --metadata title="Hermes Playbook for Scot" \
+  -c pb.css -o /tmp/pb.html
+weasyprint -u "$DIR/" /tmp/pb.html "$OUT"
+
+echo "pdf path      : $OUT"
+echo "pdf size      : $(wc -c < "$OUT") bytes"
+echo "pdf sha256    : $(sha256sum "$OUT" | awk '{print $1}')"

deliverables/scot-hermes-playbook/research/01-context-gap.md

@@ -0,0 +1,50 @@
+# 01 — The Context Gap: Claude Code vs a Fresh Hermes Install
+
+**Audience:** internal research for the Scot Murray playbook (writer takes over from here).
+**Prepared:** 2026-09-11. Primary sources: official docs (hermes-agent.nousresearch.com/docs) and live CLI verification on the reference install (Syslog kagentz). Every "exact command/file" was checked against `hermes --help` / `hermes <cmd> --help` output on v0.21.1 unless marked DOC-ONLY.
+
+## Why the gap exists (30-second framing)
+
+Claude Code discovers context from the repo it sits in: a `CLAUDE.md` it reads on every
+launch, `.claude/` folders that ship subagents, slash commands, hooks, and skills. A fresh
+Hermes install starts nearly empty by design — its philosophy is that the agent *builds* its
+own context over time (memory, skills) and that context comes from config files, not the
+repo. The "lack of context" Scot noticed is just Hermes waiting to be seeded. Below: every
+gap and the Hermes mechanism that closes it.
+
+## Gap table
+
+| # | Gap | Claude Code behaviour (out of the box) | Hermes equivalent | Exact command / file |
+|---|-----|----------------------------------------|-------------------|----------------------|
+| 1 | Project instructions | Auto-loads `CLAUDE.md` from project root; `#` prefix adds memory live; `claude /init` scaffolds it | Auto-injects `AGENTS.md` (and `.cursorrules`) from the working directory + `SOUL.md` persona + persistent memory from the Hermes home. `hermes import-agent claude-code` migrates existing CLAUDE.md content in one shot | File: `AGENTS.md` in the project root (git-tracked). Command: `hermes import-agent claude-code [--dry-run]` — VERIFIED-LIVE |
+| 2 | Team/personal instruction split | `.claude/rules/*.md` (project) + `~/.claude/rules/*.md` (personal) | Rules via `AGENTS.md` in the repo (team) vs `SOUL.md` + memory in `~/.hermes/` (personal). Config for everything else: `hermes config edit` | Files: `AGENTS.md` (repo), `SOUL.md` (`~/.hermes/`). VERIFIED-LIVE (documented in `--ignore-rules` help text, which names exactly what gets injected) |
+| 3 | Slash commands | Ships dozens built-in; custom ones in `.claude/commands/<name>.md` | Rich built-in registry (`/help` to list); custom automation goes into skills instead of command files | In-session: `/help`, `/skills`. Doc: https://hermes-agent.nousresearch.com/docs/reference/slash-commands — VERIFIED-LIVE (registry derived from `hermes_cli/commands.py`) |
+| 4 | Subagents / delegation | `.claude/agents/*.md`, `@agent` mentions, Task tool | Built-in `delegate_task` tool (isolated subagent contexts, parallel batches) plus full-process spawns (`hermes chat -q`, tmux) and the durable Kanban board for multi-profile work | In-session: ask Hermes to delegate; `hermes kanban create ...` for durable tasks. Doc: /docs/user-guide/features/kanban. VERIFIED-LIVE (`hermes kanban --help` shows 40+ verbs incl. `swarm`) |
+| 5 | Skills (auto-invoked expertise) | `.claude/skills/*.md` markdown guides invoked by natural language match | Same concept, more infrastructure: skills auto-load by task match, can be authored BY the agent itself (`skill_manage`), installed from registries, maintained by the curator | CLI: `hermes skills list/search/install/config`; in-session: `/skill <name>`, `/reload-skills`. VERIFIED-LIVE. Hub: `hermes skills browse` |
+| 6 | Project memory / auto-memory | `~/.claude/projects/<project>/memory/`, 25 KB cap | Persistent memory is first-class: built-in `MEMORY.md`/`USER.md` always active, pluggable providers (Honcho, Mem0, …) | CLI: `hermes memory setup/status/off`. VERIFIED-LIVE. Doc: /docs/user-guide/features/memory |
+| 7 | Tool permissions | `/permissions`, `settings.json` allowlists | Per-platform toolset toggles + MCP tool allowlists (`server:tool` notation) | CLI: `hermes tools` (interactive UI), `hermes tools list/enable/disable`. VERIFIED-LIVE |
+| 8 | MCP servers | `claude mcp add/list/remove`, scopes user/local/project | `hermes mcp add/list/test/configure`, one-click catalog installs, plus `hermes mcp serve` (Hermes AS an MCP server — Claude Code cannot do this) | VERIFIED-LIVE. Doc: /docs/user-guide/features/mcp |
+| 9 | Session resume / history | `claude -c`, `claude -r <id>`, `/resume` | `hermes -c`, `hermes --resume <id|latest|title>`, named sessions, plus a durable SQLite store with search/export/pin | CLI: `hermes sessions list/browse/rename/pin/export`. VERIFIED-LIVE |
+| 10 | Cost & context visibility | `/cost`, `/context` grid | `/usage`, `/insights [days]`, `/compress` (auto-compression built in), `/prompt-size` byte breakdown | VERIFIED-LIVE (`insights`, `logs` subcommands confirmed in `hermes --help`) |
+| 11 | Headless/CI mode | `claude -p` print mode | `-z/--oneshot` flag (prints only final response) + `hermes chat -q` | VERIFIED-LIVE |
+| 12 | Import of prior setup | n/a (it IS the incumbent) | **The single most important one for Scot:** `hermes import-agent claude-code` maps CLAUDE.md/AGENTS.md instructions, permission allowlists, MCP servers, skills, and memories into Hermes equivalents (never API keys) | `hermes import-agent claude-code --dry-run` then without `--dry-run`. VERIFIED-LIVE. Also `hermes sessions import` for old Claude Code conversations — VERIFIED-LIVE |
+| 13 | Hooks on tool events | 8 hook types in `settings.json` (PreToolUse, PostToolUse, …) | Shell-script hooks managed via `hermes hooks` | CLI: `hermes hooks`. VERIFIED-LIVE (in top-level command list) |
+| 14 | Scheduled / recurring work | `claude /loop` (in-session only) | Durable cron scheduler with multi-platform delivery, chained outputs (`context_from`), per-job model overrides | CLI: `hermes cron list/create/edit/pause/resume/run/remove/doctor`. VERIFIED-LIVE. Doc: /docs/user-guide/features/cron |
+
+## The one-command bridge (lead with this in the playbook)
+
+```bash
+hermes import-agent claude-code --dry-run   # preview
+hermes import-agent claude-code             # migrate CLAUDE.md → AGENTS.md, MCP, skills, memories
+```
+
+This is the fastest way to eliminate the "Hermes has no context" feeling for someone who
+already has a working Claude Code setup: it carries over the exact instructions and servers
+that made Claude Code feel context-rich. Preview-only mode exists (`--dry-run`), it never
+imports credentials, and conflicts are skipped by default (`--overwrite` to change).
+
+## Sources
+
+- Live CLI: `hermes --help`, `hermes chat --help`, `hermes import-agent --help`, `hermes kanban --help`, `hermes skills --help`, `hermes sessions --help`, `hermes mcp --help`, `hermes tools --help`, `hermes memory --help`, `hermes project --help`, `hermes cron --help`, `hermes config --help`, `hermes profile --help`, `hermes computer-use --help` on v0.21.1, reference install (Syslog kagentz), 2026-09-11. Raw dump: `cli-help-dump.txt` next to this file.
+- Docs: https://hermes-agent.nousresearch.com/docs/ (index) — all URLs in sources.md
+- Claude Code side: installed skill `delegate-coding-agent/references/claude-code.md` (Hermes Agent + Teknium, v2.2.1), `/home/hermes/.hermes/skills/autonomous-ai-agents/`

deliverables/scot-hermes-playbook/research/02-leverage-surfaces.md

@@ -0,0 +1,101 @@
+# 02 — High-Leverage Hermes Surfaces (the "harness power" inventory)
+
+**Prepared:** 2026-09-11. Each surface: what it does, when to use it, exact command/file, doc URL. Verification: V-LIVE = confirmed against live CLI v0.21.1 on the reference install (Syslog kagentz); V-DOC = confirmed against official docs page (URL resolved HTTP 200); V-FILE = present on this machine's installed skills.
+
+---
+
+### 1. Persona / SOUL file
+- **What:** `SOUL.md` is Hermes' personality + standing-identity file, auto-injected into the system prompt alongside `AGENTS.md` rules and memory (confirmed by `--ignore-rules` help text which lists exactly what gets injected).
+- **When:** client wants the agent to have a consistent voice/role (e.g., "you are my analyst").
+- **Where:** `~/.hermes/SOUL.md` (per-profile: `~/.hermes/profiles/<name>/SOUL.md`).
+- **Doc:** https://hermes-agent.nousresearch.com/docs/user-guide/configuration [V-DOC]
+
+### 2. Persistent memory (built-in + providers)
+- **What:** Built-in `MEMORY.md` / `USER.md` always active; optional external providers (honcho, mem0, hindsight, byterover, …). Memory is injected every session — this is the single biggest cure for "it forgets my project."
+- **When:** after any correction or preference the user states ("use bun, not npm") — tell Hermes to remember it and it persists.
+- **Command:** `hermes memory setup|status|off|reset` [V-LIVE]
+- **Doc:** https://hermes-agent.nousresearch.com/docs/user-guide/features/memory [V-DOC]
+
+### 3. Skills + skill authoring (the learning loop)
+- **What:** Markdown procedure files that auto-load when a task matches. The differentiator: Hermes can WRITE its own skills after learning a workflow (self-improving), and the curator maintains them (usage tracking, archiving, backups).
+- **When:** any workflow done twice — say "save this as a skill."
+- **Commands:** `hermes skills list|search|install|browse|config|check|update` [V-LIVE]; in-session `/skill <name>`, `/reload-skills` [V-DOC]; authoring tool in-session is `skill_manage` (agent-side; writer should describe it as "ask your Hermes to save the procedure as a skill").
+- **Docs:** https://hermes-agent.nousresearch.com/docs/reference/skills-catalog [V-DOC]; curator: https://hermes-agent.nousresearch.com/docs/user-guide/features/curator [V-DOC]
+
+### 4. Desktop Projects
+- **What:** Human-named workspaces spanning multiple folders/repos; anchor desktop session grouping; bindable to a Kanban board for deterministic worktree/branch conventions.
+- **When:** Scot's multi-repo workflows (portfolio ops). `hermes project create <name>` then `add-folder`.
+- **Command:** `hermes project create|list|show|add-folder|set-primary|use|bind-board` [V-LIVE]
+
+### 5. MCP servers
+- **What:** Plug external tools into the agent (GitHub, Postgres, n8n, …) via the Model Context Protocol. Also runs in reverse: `hermes mcp serve` exposes Hermes conversations to other agents.
+- **Command:** `hermes mcp add|list|test|configure|picker|catalog|install|serve` [V-LIVE]
+- **Doc:** https://hermes-agent.nousresearch.com/docs/user-guide/features/mcp [V-DOC]
+
+### 6. Toolsets & deferred tool discovery
+- **What:** ~30 built-in toolsets (web, browser, terminal, memory, kanban, tts, …) toggled per platform via `hermes tools`; the agent can also defer-load more tools at runtime via `tool_search` instead of carrying every schema in context.
+- **When:** trim toolsets for focus/cost, or enable `browser` for web work.
+- **Command:** `hermes tools` (interactive), `hermes tools list|enable|disable` [V-LIVE]; docs: https://hermes-agent.nousresearch.com/docs/reference/tools-reference [V-DOC]
+
+### 7. Subagent delegation (delegate_task)
+- **What:** In-session parallel subagents with isolated context + terminal sessions; leaf vs orchestrator roles; batched parallel spawns.
+- **When:** research fan-out, parallel code review, anything that would flood the main context.
+- **Command:** agent-side tool (no CLI). In-session: ask Hermes to "delegate X to subagents." Docs: /docs/user-guide/features (delegation section) [V-DOC]
+
+### 8. Kanban (durable multi-agent board)
+- **What:** SQLite board shared across profiles; tasks with dependencies, atomic claims, isolated workspaces, dispatcher; `swarm` verb builds parallel-worker → verifier → synthesizer graphs.
+- **When:** recurring multi-step operations, handoffs between specialist profiles, long-running campaigns that must survive restarts.
+- **Command:** `hermes kanban create|list|show|swarm|link|complete|watch|stats|dispatch` (40+ verbs) [V-LIVE]
+- **Doc:** https://hermes-agent.nousresearch.com/docs/user-guide/features/kanban [V-DOC]
+
+### 9. Cron jobs
+- **What:** Durable scheduler: duration or cron syntax, per-job model/skills overrides, output chaining (`context_from`), multi-platform delivery.
+- **When:** daily reports, monitoring with alerts, weekly reviews.
+- **Command:** `hermes cron list|create|edit|pause|resume|run|remove|doctor|status` [V-LIVE]
+- **Doc:** https://hermes-agent.nousresearch.com/docs/user-guide/features/cron [V-DOC]
+
+### 10. Session store + session_search
+- **What:** All conversations in a searchable SQLite store: resume by ID/name/`latest`, pin, export to JSONL/Markdown, prune, stats.
+- **When:** "what did we decide last week" — the agent can search past sessions; user can browse them.
+- **Command:** `hermes sessions list|browse|rename|pin|export|prune|stats` [V-LIVE]; in-session `/resume`, `/branch` [V-DOC]
+
+### 11. Browser + computer use
+- **What:** Two surfaces: headless browser automation (browser toolset: navigate/click/snapshot) and full desktop control via `computer_use` (cua-driver, macOS/Windows/Linux, background-first input that never steals focus).
+- **When:** web research → headless browser; native apps (Excel, Figma, native chat) → computer use.
+- **Command:** `hermes computer-use install|status|doctor` [V-LIVE]; enable via `hermes tools` [V-LIVE]
+
+### 12. Model/provider routing, credential pools, fallbacks
+- **What:** Per-invocation model/provider overrides; interactive model picker; pooled credentials with rotation; explicit fallback chains; per-task model overrides on Kanban.
+- **Command:** `hermes model` [V-LIVE], `hermes fallback list|add|remove` [V-LIVE], `hermes auth add|list|priority|reset` [V-LIVE]; per-run flags `-m`, `--provider`, `--reasoning` [V-LIVE]
+- **Doc:** https://hermes-agent.nousresearch.com/docs/integrations/providers [V-DOC]
+- **Note for Scot (OpenRouter + small fast models):** `--reasoning high` on hard tasks; `hermes fallback add` so a failed call rolls to a second model instead of erroring.
+
+### 13. Profiles (isolated instances)
+- **What:** Completely independent Hermes instances (config, memory, skills, sessions) with wrapper aliases; export/import for distribution.
+- **When:** separate work/persona contexts, or one profile per client.
+- **Command:** `hermes profile list|create|use|alias|export|import` [V-LIVE]
+- **Doc:** https://hermes-agent.nousresearch.com/docs/user-guide/profiles [V-DOC]
+
+### 14. Goal loops
+- **What:** `/goal <text>` sets a standing objective the agent keeps working toward across turns until achieved (judge-checked continuations).
+- **When:** "keep the CI green until it passes," "keep researching until you have 5 verified sources."
+- **Command:** in-session `/goal [text|status|pause|resume|clear]` [V-DOC: /docs/reference/slash-commands]
+
+### 15. Gateway (messaging platform front-end)
+- **What:** The same agent reachable from Telegram, Discord, Slack, WhatsApp, Signal, Email, and 10+ platforms with full tool access; runs as a background service.
+- **Command:** `hermes gateway run|install|start|status|setup` [V-LIVE]
+- **Doc:** https://hermes-agent.nousresearch.com/docs/user-guide/messaging/ [V-DOC]
+
+### 16. Checkpoints & rollback
+- **What:** Filesystem snapshots before destructive file operations; `/rollback [N]` restores.
+- **When:** letting the agent loose on important files.
+- **Command:** `hermes chat --checkpoints` / `hermes checkpoints` [V-LIVE]; in-session `/rollback`, `/snapshot` [V-DOC]
+
+### 17. Projects↔Kanban binding + worktree mode
+- **What:** `hermes project bind-board` ties a board to a project (deterministic worktree + branch per task); `-w/--worktree` runs any session in an isolated git worktree.
+- **When:** parallel coding agents that must not collide.
+- **Command:** `hermes project bind-board` [V-LIVE]; `hermes -w` [V-LIVE]
+
+### 18. Prompt-size introspection
+- **What:** Byte breakdown of system prompt + tool schemas — diagnose why responses feel "dumb" (usually context bloat).
+- **Command:** `hermes prompt-size` [V-LIVE]

deliverables/scot-hermes-playbook/research/03-command-cheatsheet.md

@@ -0,0 +1,121 @@
+# 03 — Command Cheatsheet (every entry verified)
+
+**Verification method:** each VERIFIED-LIVE entry was confirmed against `hermes --help` or `hermes <cmd> --help` on Hermes Agent v0.21.1 (2026.9.7), reference install (Syslog kagentz), 2026-09-11. Raw output: `cli-help-dump.txt`. DOC-ONLY entries come from the official docs (URL given). Nothing is invented.
+
+## (a) CLI — `hermes ...`
+
+### Setup & health
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes setup` | Interactive setup wizard | VERIFIED-LIVE |
+| `hermes doctor [--fix] [--live]` | Diagnose config/deps; `--fix` auto-repairs | VERIFIED-LIVE |
+| `hermes status [--all] [--deep]` | Component status | VERIFIED-LIVE |
+| `hermes config show/edit/get/set/unset/path/env-path/check/migrate` | View/edit config | VERIFIED-LIVE |
+| `hermes update` | Update Hermes to latest | VERIFIED-LIVE |
+
+### The Claude Code bridge (highest value for Scot)
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes import-agent claude-code [--dry-run] [--overwrite] [--yes]` | One-command import of a Claude Code setup: maps CLAUDE.md/AGENTS.md instructions, permission allowlists, MCP servers, skills, memories into Hermes equivalents. Never imports API keys. | VERIFIED-LIVE |
+| `hermes import-agent codex` | Same for Codex CLI setups | VERIFIED-LIVE |
+| `hermes sessions import` | Import a Claude Code or Codex CLI **session/conversation** into Hermes | VERIFIED-LIVE (subcommand listed in `hermes sessions --help`) |
+| `hermes skills trust` | Trust a repo so its project-local skills (`./.hermes/skills`) load — the Hermes analog of `.claude/skills/` | VERIFIED-LIVE |
+
+### Daily driving
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes` / `hermes chat` | Interactive session | VERIFIED-LIVE |
+| `hermes -c [NAME]` / `hermes --resume <id\|latest>` | Resume by name or ID | VERIFIED-LIVE |
+| `hermes --in DIR --resume latest` | Resume the latest session for a directory | VERIFIED-LIVE |
+| `hermes -z "PROMPT"` | One-shot: prints ONLY the final answer (scripting/CI); tools, memory, and AGENTS.md still load | VERIFIED-LIVE |
+| `hermes chat -q "PROMPT"` | Single-query mode | VERIFIED-LIVE |
+| `hermes -m MODEL --provider PROVIDER --reasoning LEVEL` | Per-run model/provider/reasoning overrides (`none…ultra`) | VERIFIED-LIVE |
+| `hermes -s SKILL1,SKILL2` | Preload specific skills for the session | VERIFIED-LIVE |
+| `hermes -t TOOLSETS` | Restrict toolsets for this run | VERIFIED-LIVE |
+| `hermes -w` | Isolated git worktree session (parallel agents on one repo) | VERIFIED-LIVE |
+| `hermes chat --checkpoints` | Enable filesystem checkpoints (`/rollback` to restore) | VERIFIED-LIVE |
+| `hermes chat --max-turns N` / `--run-budget SECONDS` | Cap loop iterations / wall-clock budget | VERIFIED-LIVE |
+
+### Context & memory management
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes memory setup/status/off/reset` | External memory provider management (built-in MEMORY.md/USER.md always active) | VERIFIED-LIVE |
+| `hermes sessions list/browse/rename/pin/export/prune/stats` | Session store management | VERIFIED-LIVE |
+| `hermes skills list/search/install/inspect/browse/config/check/update` | Skill management | VERIFIED-LIVE |
+| `hermes skills trust/untrust` | Repo-local skill trust | VERIFIED-LIVE |
+| `hermes curator status/run/pause/pin/...` | Background skill maintenance (auto-archive, backups) | VERIFIED-LIVE |
+| `hermes prompt-size` | Byte breakdown of system prompt + tool schemas (context-bloat diagnosis) | VERIFIED-LIVE |
+| `hermes insights [--days N]` | Usage analytics | VERIFIED-LIVE |
+
+### Tools, MCP, integrations
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes tools` (interactive) / `list/enable/disable` | Per-platform toolset toggles; MCP tools as `server:tool` | VERIFIED-LIVE |
+| `hermes mcp add/remove/list/test/configure/picker/catalog/install` | MCP server management (incl. one-click catalog installs) | VERIFIED-LIVE |
+| `hermes mcp serve` | Run Hermes AS an MCP server for other agents | VERIFIED-LIVE |
+| `hermes computer-use install/status/doctor` | Desktop-control backend (cua-driver) | VERIFIED-LIVE |
+| `hermes gateway run/install/start/status/setup` | Messaging gateway (Telegram, Discord, Slack, WhatsApp, …) | VERIFIED-LIVE |
+| `hermes send` | Send a message to a configured platform (scripts/cron/CI) | VERIFIED-LIVE |
+
+### Automation & multi-agent
+| Command | What it does | Tag |
+|---|---|---|
+| `hermes cron list/create/edit/pause/resume/run/remove/doctor` | Scheduled jobs (durable, multi-platform delivery) | VERIFIED-LIVE |
+| `hermes cron notepad` | Durable per-job key-value notepad across runs | VERIFIED-LIVE |
+| `hermes kanban create/list/show/link/complete/swarm/...` | Durable multi-profile task board (40+ verbs) | VERIFIED-LIVE |
+| `hermes kanban swarm` | Generate a parallel-workers → verifier → synthesizer task graph | VERIFIED-LIVE |
+| `hermes project create/list/add-folder/bind-board` | Named multi-folder workspaces (desktop Projects) | VERIFIED-LIVE |
+| `hermes profile list/create/use/alias/export/import` | Isolated Hermes instances | VERIFIED-LIVE |
+| `hermes auth add/list/priority/reset` | Pooled credentials per provider (rotation) | VERIFIED-LIVE |
+| `hermes fallback list/add/remove` | Fallback model chain (auto-rollover on failure) | VERIFIED-LIVE |
+| `hermes model` | Interactive model/provider picker | VERIFIED-LIVE |
+| `hermes -yolo` | Bypass command approval prompts (use with care) | VERIFIED-LIVE |
+| `hermes pause` / `hermes resume` | Emergency stop / lift (pauses cron, kanban dispatch, gateway turns) | VERIFIED-LIVE |
+
+## (b) In-session slash commands
+
+Source: official slash-commands reference https://hermes-agent.nousresearch.com/docs/reference/slash-commands (DOC-ONLY — slash commands run inside a chat session and were not exercised from this headless research run; the CLI subcommands they map to were verified live). DOC-ONLY.
+
+### Context & session
+| Command | What it does |
+|---|---|
+| `/help` | List all commands (authoritative in your version) |
+| `/new` (`/reset`) | Fresh session |
+| `/resume [name]` | Resume a named/recent session |
+| `/branch` (`/fork`) | Branch the current session |
+| `/compress` | Manually compress context (auto-compression also exists) |
+| `/undo` | Remove last exchange |
+| `/retry` | Resend last message |
+| `/title [name]` | Name the session |
+| `/save` | Save conversation to file |
+| `/history` | Show conversation history |
+
+### Power surfaces
+| Command | What it does |
+|---|---|
+| `/skill <name>` | Load a skill into the session |
+| `/skills` | Search/install skills |
+| `/reload-skills` | Re-scan skill directory |
+| `/tools` / `/toolsets` | Manage tools |
+| `/goal [text]` | Set a standing goal the agent works toward across turns (`/goal status/pause/clear` to manage) |
+| `/background <prompt>` | Run a prompt in the background |
+| `/queue <prompt>` | Queue a prompt for the next turn |
+| `/steer <prompt>` | Inject a course-correction after the next tool call without interrupting |
+| `/agents` | Show active agents and running tasks |
+| `/cron` | Manage cron jobs in-session |
+| `/kanban` | Multi-profile collaboration board in-session |
+| `/model [name]` | Show/change model mid-session |
+| `/reasoning [level]` | Set reasoning effort |
+| `/voice [on\|off\|tts]` | Voice mode |
+| `/rollback [N]` | Restore filesystem checkpoint (needs `--checkpoints`) |
+| `/usage` | Token usage |
+| `/insights [days]` | Usage analytics |
+| `/platforms` | Gateway platform status |
+| `/compact`-equivalent note | Hermes compresses automatically near the context limit; no manual threshold watch needed like Claude Code's `/context` |
+
+### The "work alongside Claude Code" shortlist
+1. `hermes import-agent claude-code --dry-run` → migrate the setup (VERIFIED-LIVE)
+2. `hermes sessions import` → bring the conversation history over (VERIFIED-LIVE)
+3. `hermes skills trust` → load repo-local skills like `.claude/skills/` (VERIFIED-LIVE)
+4. `hermes -c` / `hermes --in <repo> --resume latest` → per-directory session continuity (VERIFIED-LIVE)
+5. `hermes mcp serve` → expose Hermes to Claude Code as an MCP server (VERIFIED-LIVE) — the reverse direction Claude Code can't do

deliverables/scot-hermes-playbook/research/04-claude-code-bridge.md

@@ -0,0 +1,76 @@
+# 04 — The Claude Code Bridge: Running Hermes WITH Claude Code
+
+**Prepared:** 2026-09-11. Scot already runs both tools. This file documents the proven integration patterns, citing the installed skills on this host (paths under `/home/hermes/.hermes/skills/`) and official docs.
+
+## Pattern 0 — Import (do this first)
+`hermes import-agent claude-code` [VERIFIED-LIVE] maps CLAUDE.md/AGENTS.md instructions,
+permission allowlists, MCP servers, skills, and memories into Hermes equivalents. It always
+shows a preview, never imports credentials. `hermes sessions import` [VERIFIED-LIVE] pulls
+in old Claude Code conversations. After import, Hermes "knows" the projects — the context
+gap disappears on day one.
+
+## Pattern 1 — Hermes as orchestrator, Claude Code as worker
+Source: installed skill **`autonomous-ai-agents/delegate-coding-agent`** (v1.0.0) + its
+reference `references/claude-code.md` (v2.2.1) [V-FILE]. The skill is an official Hermes
+skill authored for exactly this.
+
+Two orchestration modes (verbatim from the skill):
+- **Print mode (preferred):** `claude -p '<task>' --allowedTools 'Read,Edit' --max-turns 10` —
+  one-shot, no dialogs, structured JSON output with `session_id`, `num_turns`,
+  `total_cost_usd`. Ask Hermes: *"delegate this coding task to Claude Code in print mode."*
+- **Interactive PTY via tmux:** multi-turn sessions — Hermes starts `tmux new-session`,
+  sends prompts with `send-keys`, monitors with `capture-pane`. For iterative
+  refactor → review → fix cycles.
+
+Cross-agent review loop (also from the skill):
+```
+git diff main...feature | claude -p 'Review this diff for bugs and security issues.' --max-turns 1
+```
+Hermes runs this, reads the output, and fixes findings itself — Claude Code becomes a
+reviewer Hermes coordinates.
+
+Safety rails the skill prescribes: explicit `workdir`, clean git status before launch,
+narrow task prompts, `git diff` review, targeted tests before committing.
+
+## Pattern 2 — Parallel workstreams + neutral merge reconciliation
+Source: installed skill **`autonomous-ai-agents/merge-reconciler`** [V-FILE].
+When Hermes and Claude Code (or two Hermes workers) both edit the same repo and collide:
+- Do NOT let either agent resolve the conflict — both are biased toward their own side.
+- Spawn a **neutral third agent** with the merge-reconciler skill; it classifies every
+  conflicted hunk (disjoint-intent / same-question-different-answer / superseded), resolves
+  under an impartiality contract (touch only conflict markers, surface every design call),
+  verifies with build/tests, and hands back a summary naming every hunk decision.
+- Kanban-native shape: a reconciliation card assigned to a **third profile** with both
+  workers' cards as parents — parent links carry both sides' completion summaries into the
+  reconciler's context automatically.
+
+## Pattern 3 — Hermes as MCP server (Claude Code gets Hermes tools)
+`hermes mcp serve` [VERIFIED-LIVE] runs Hermes as an MCP server exposing its conversations
+and capabilities. Claude Code supports MCP clients (`claude mcp add`), so Claude Code can
+consume Hermes as a tool provider — persistent memory, skills, cron — the surfaces Claude
+Code lacks. This is the reverse-bridge only Hermes can offer. Docs:
+https://hermes-agent.nousresearch.com/docs/user-guide/features/mcp
+
+## Pattern 4 — Import legacy sessions for continuity
+`hermes sessions import` [VERIFIED-LIVE] imports a Claude Code session into the Hermes
+store; from then on `hermes --resume <id>` / `hermes sessions browse` treat it as native
+history. Use when mid-project: the new agent picks up exactly where Claude Code left off.
+
+## Pattern 5 — Desktop GUI automation either side can use
+Source: installed skill **`autonomous-ai-agents/computer-use`** (v2.0.0) [V-FILE].
+`hermes computer-use install` sets up cua-driver; the `computer_use` toolset drives native
+desktop apps background-first (never steals focus/cursor), any-model, cross-platform.
+Relevant to the bridge because Claude Code has no desktop automation — if a task needs
+Figma/Excel/native apps, that part routes to Hermes while the code routes to Claude Code.
+Cmd: `hermes computer-use doctor` for health checks.
+
+## Pattern 6 — The import-agent philosophy in one line
+Claude Code holds repo context in `CLAUDE.md`; Hermes holds it in `AGENTS.md` + memory +
+skills. `hermes import-agent claude-code` translates the first; the learning loop
+("save this as a skill") rebuilds the rest automatically the more Scot uses Hermes.
+
+## Reference paths (for the writer)
+- `/home/hermes/.hermes/skills/autonomous-ai-agents/delegate-coding-agent/SKILL.md` and `references/claude-code.md`
+- `/home/hermes/.hermes/skills/autonomous-ai-agents/merge-reconciler/SKILL.md`
+- `/home/hermes/.hermes/skills/autonomous-ai-agents/computer-use/SKILL.md`
+- `hermes import-agent --help` raw output in `cli-help-dump.txt` (lines 554-577)

deliverables/scot-hermes-playbook/research/05-videos.md

@@ -0,0 +1,119 @@
+# 05 — The Video Watch List (every URL verified 2026-09-11)
+
+**Verification method:** each video was found via YouTube search-results scrape (`videoRenderer` metadata), then confirmed with the YouTube oEmbed endpoint (`curl -s "https://www.youtube.com/oembed?url=<URL>&format=json"`) — every entry below returned HTTP 200 with matching title/author (status PASS). Publish dates, durations, and view counts were read from each watch page's metadata. Raw evidence for all 21 entries: `video-verification.json` in this directory. **21/21 PASS, 0 FAIL.**
+
+## Tier 1 — Hermes-specific, start here
+
+### 1. Learn 95% of Hermes Agent in 31 Minutes
+- **Channel:** Sharbel A. | **URL:** https://www.youtube.com/watch?v=Ta2wg6xPaY4 | **Duration:** 31:28 | **Published:** 2026-08-09 | **Views:** ~129k
+- **oEmbed:** PASS (title/author match)
+- **What it demonstrates:** end-to-end Hermes fundamentals — install, sessions, skills, memory, the learning loop. The most complete single-video orientation found.
+- **Watch this when you want** the fastest real overview of the whole harness before touching config.
+
+### 2. Hermes Agent Fundamentals In 29 Minutes
+- **Channel:** Tina Huang | **URL:** https://www.youtube.com/watch?v=5_N84t1rUU0 | **Duration:** 29:40 | **Published:** 2026-07-20 | **Views:** ~463k (highest-reach Hermes video found)
+- **oEmbed:** PASS
+- **What it demonstrates:** conceptual grounding — why Hermes' memory/skills loop differs from one-shot coding agents; practical walkthrough.
+- **Watch this when you want** to understand *why* Hermes feels different from Claude Code, not just which buttons to press.
+
+### 3. Every Level of Hermes Agent Explained
+- **Channel:** Jack Roberts | **URL:** https://www.youtube.com/watch?v=6GtF_uHbGhw | **Duration:** 25:35 | **Published:** 2026-06-17 | **Views:** ~163k
+- **oEmbed:** PASS
+- **What it demonstrates:** beginner → advanced ladder of features (memory, skills, automation, multi-agent).
+- **Watch this when you want** a map of what to learn next after the basics.
+
+### 4. Hermes Agent Full Tutorial INSTALLATION + USECASES
+- **Channel:** CodeHead | **URL:** https://www.youtube.com/watch?v=8GjyOQy19so | **Duration:** 7:47 | **Published:** 2026-05-14 | **Views:** ~64k
+- **oEmbed:** PASS
+- **What it demonstrates:** install through real use-cases, compact.
+- **Watch this when you want** a quick install-to-value demo to share with a colleague.
+
+### 5. Hermes Agent Explained In 5 Minutes
+- **Channel:** CodeHead | **URL:** https://www.youtube.com/watch?v=9GpWELm3_XI | **Duration:** 4:53 | **Published:** 2026-05-23 | **Views:** ~251k
+- **oEmbed:** PASS
+- **What it demonstrates:** 5-minute conceptual pitch of the agent and its learning loop.
+- **Watch this when you want** the elevator pitch before committing 30 minutes.
+
+## Tier 2 — Hermes-specific deep dives
+
+### 6. 100 Days With Hermes Agent in 21 Minutes
+- **Channel:** Sharbel A. | **URL:** https://www.youtube.com/watch?v=sCa3BtpkziQ | **Duration:** 21:19 | **Published:** 2026-06-17 | **Views:** ~58k
+- **oEmbed:** PASS
+- **What it demonstrates:** long-horizon usage — what memory/skills accumulation actually looks like after months of daily use.
+- **Watch this when you want** to see the payoff of the learning loop over time.
+
+### 7. Hermes Agent - Crash Course for Beginners (AI Agent)
+- **Channel:** Adrian Twarog | **URL:** https://www.youtube.com/watch?v=4sAmpcSOVEw | **Duration:** 22:19 | **Published:** 2026-07-21 | **Views:** ~46k
+- **oEmbed:** PASS
+- **What it demonstrates:** beginner crash course from a well-known dev-YouTube creator.
+- **Watch this when you want** a second independent explanation of the basics.
+
+### 8. Hermes Agent: The Ultimate Beginner's Guide
+- **Channel:** Metics Media | **URL:** https://www.youtube.com/watch?v=CwPUOVUdApE | **Duration:** 37:08 | **Published:** 2026-04-24 | **Views:** ~119k
+- **oEmbed:** PASS
+- **What it demonstrates:** long-form beginner guide incl. setup and everyday workflows.
+- **Watch this when you want** the most thorough single walkthrough in one sitting.
+
+### 9. Hermes Agent Just Killed OpenClaw (Full Tutorial)
+- **Channel:** Leon van Zyl | **URL:** https://www.youtube.com/watch?v=jmtpYUOr7_U | **Duration:** 19:59 | **Published:** 2026-04-28 | **Views:** ~16k
+- **oEmbed:** PASS
+- **What it demonstrates:** full tutorial framing Hermes against the OpenClaw workflow (MCP config, memory, agents).
+- **Watch this when you want** a practitioner's feature-by-feature tutorial.
+
+### 10. Hermes Agent vs OpenClaw
+- **Channel:** Sharbel A. | **URL:** https://www.youtube.com/watch?v=zwqhemjHq3E | **Duration:** 15:28 | **Published:** 2026-04-20 | **Views:** ~35k
+- **oEmbed:** PASS
+- **What it demonstrates:** head-to-head comparison of the two agent harnesses.
+- **Watch this when you want** the tradeoffs between Hermes and its main alternative.
+
+### 11. Better than OpenClaw? Testing Hermes Agent w/ Qwen 3 model
+- **Channel:** Tonbi's AI Garage | **URL:** https://www.youtube.com/watch?v=8tpuky8HpXw | **Duration:** 15:08 | **Published:** 2026-03-11 | **Views:** ~18k
+- **oEmbed:** PASS
+- **What it demonstrates:** Hermes driven by an OpenRouter-served open model (Qwen 3) — directly relevant to an OpenRouter-connected install.
+- **Watch this when you want** to see how small open models behave inside Hermes.
+
+### 12. Use This To Make The Hermes Agent Basically Free
+- **Channel:** AI LABS | **URL:** https://www.youtube.com/watch?v=5d02TYoOzfE | **Duration:** 13:08 | **Published:** 2026-07-01 | **Views:** ~55k
+- **oEmbed:** PASS
+- **What it demonstrates:** running Hermes on cheap/free model backends.
+- **Watch this when you want** to cut inference costs on an OpenRouter account.
+
+### 13. Hermes Agent The 24/7 Self-Evolving AI Agent!
+- **Channel:** WorldofAI | **URL:** https://www.youtube.com/watch?v=cu2fgknmemA | **Duration:** 9:15 | **Published:** 2026-04-07 | **Views:** ~47k
+- **oEmbed:** PASS
+- **What it demonstrates:** always-on operation: gateway, cron, background automation.
+- **Watch this when you want** to turn Hermes from a chat window into a 24/7 assistant.
+
+## Tier 3 — Adjacent (origin/philosophy; not tutorials)
+
+### 14. Hermes Co-Founder on Building an AI Agent That Improves Itself | Karan Malhotra
+- **Channel:** Peter Yang | **URL:** https://www.youtube.com/watch?v=UWjh5Z4s8jY | **Duration:** 46:45 | **Published:** 2026-08-02 | **Views:** ~37k
+- **oEmbed:** PASS
+- **What it demonstrates:** interview with Hermes' co-founder on the design philosophy (self-improving agents, skills as memory).
+- **Watch this when you want** to understand where the product is going.
+
+### 15. Hermes Agent: Agents that grow with you | Episode #357
+- **Channel:** Practical AI | **URL:** https://www.youtube.com/watch?v=UTZhvPXnmwA | **Duration:** 47:34 | **Published:** 2026-05-20 | **Views:** ~1.9k
+- **oEmbed:** PASS
+- **What it demonstrates:** podcast-depth technical discussion of the agent architecture.
+- **Watch this when you want** the engineering story behind the learning loop.
+
+### 16. Did Hermes Agent just kill OpenClaw? (full guide)
+- **Channel:** Alex Finn | **URL:** https://www.youtube.com/watch?v=tP6yf22OJdI | **Duration:** 13:55 | **Published:** 2026-03-31 | **Views:** ~132k
+- **oEmbed:** PASS
+- **What it demonstrates:** guide-style comparison/switch content.
+- **Watch this when you want** a switcher's guide perspective.
+
+### 17. Hermes Agent: Why Everyone's Ditching OpenClaw in 2026
+- **Channel:** Luke Alexander AI | **URL:** https://www.youtube.com/watch?v=1UgXUjT-QtI | **Duration:** 18:03 | **Published:** 2026-03-26 | **Views:** ~14k
+- **oEmbed:** PASS — adjacent, comparison content.
+- **Watch this when you want** more comparison context.
+
+## Honesty note (required by task spec)
+At least 16 of the 17 entries above are directly Hermes-specific (not merely adjacent); the
+"fewer than 5 exist" fallback clause was NOT needed — no padding was necessary. Entries
+found in search but excluded as thin/low-signal: `iqN6MVzpJTk` (3.1k views, news-style),
+`83nWNRKZTCE` (465 views), `6M2tItdARew` (1.2k views), `P2LIFtrRr2U` (promo-style) — all
+also verified PASS and kept in `video-verification.json` as spares. No official Nous
+Research YouTube tutorial channel was found in searches; the strongest signal of
+Hermes-specific video content is the third-party ecosystem above.

deliverables/scot-hermes-playbook/research/_evidence/cli-help-dump.txt

@@ -0,0 +1,577 @@
+===== hermes chat --help =====
+usage: hermes chat [-h] [-q QUERY | --query-file PATH] [--oneshot]
+                   [--image IMAGE] [-m MODEL] [-t TOOLSETS]
+                   [--reasoning LEVEL] [-s SKILLS] [--provider PROVIDER] [-v]
+                   [-Q] [--resume SESSION_ID] [--no-restore-cwd] [--in DIR]
+                   [--continue [SESSION_NAME]] [--create-if-missing]
+                   [--worktree] [--accept-hooks] [--checkpoints]
+                   [--max-turns N] [--run-budget SECONDS] [--yolo]
+                   [--pass-session-id] [--ignore-user-config] [--ignore-rules]
+                   [--safe-mode] [--source SOURCE] [--tui] [--cli] [--dev]
+
+Start an interactive chat session with Hermes Agent
+
+options:
+  -h, --help            show this help message and exit
+  -q, --query QUERY     Query to run. On a real TTY the prompt seeds an
+                        interactive session (submitted literally as the first
+                        turn); combined with --oneshot or -Q, or on a non-TTY,
+                        it answers and exits.
+  --query-file PATH     Read the single query from a file instead of the
+                        command line ('-' reads stdin). Safe for arbitrary
+                        text: nothing is shell-interpreted, so quotes, $(...),
+                        and backticks are preserved verbatim. Mutually
+                        exclusive with -q.
+  --oneshot             With -q/--query-file: answer the query and exit
+                        (legacy single-query behavior) instead of seeding an
+                        interactive session. Implied on non-TTY stdio and by
+                        -Q/--quiet.
+  --image IMAGE         Optional local image path to attach to a single query
+  -m, --model MODEL     Model to use (e.g., anthropic/claude-sonnet-4)
+  -t, --toolsets TOOLSETS
+                        Comma-separated toolsets to enable
+  --reasoning LEVEL     Reasoning effort for this session: none, minimal, low,
+                        medium, high, xhigh, max, or ultra. Overrides
+                        agent.reasoning_effort for this run only (same levels
+                        as the /reasoning slash command).
+  -s, --skills SKILLS   Preload one or more skills for the session (repeat
+                        flag or comma-separate)
+  --provider PROVIDER   Inference provider (default: auto). Built-in or a
+                        user-defined name from `providers:` in config.yaml.
+  -v, --verbose         Verbose output
+  -Q, --quiet           Quiet mode for programmatic use: suppress banner,
+                        spinner, and tool previews. Only output the final
+                        response and session info.
+  --resume, -r SESSION_ID
+                        Resume a previous session by ID (shown on exit), or
+                        'latest' for the most recent session
+  --no-restore-cwd      Don't cd into a resumed session's recorded working
+                        directory.
+  --in DIR              Change into DIR before starting or resuming (scopes '
+                        --resume latest' / -c lookups to DIR's workspace).
+  --continue, -c [SESSION_NAME]
+                        Resume a session by name, or the most recent if no
+                        name given
+  --create-if-missing   With -c/--continue <name>: if no session matches the
+                        name, create a new session with that title and proceed
+                        (instead of failing with a not-found error).
+                        Programmatic callers that want 'send to this named
+                        thread, making it if needed'.
+  --worktree, -w        Run in an isolated git worktree (for parallel agents
+                        on the same repo)
+  --accept-hooks        Auto-approve any unseen shell hooks declared in
+                        config.yaml without a TTY prompt (see also
+                        HERMES_ACCEPT_HOOKS env var and hooks_auto_accept: in
+                        config.yaml).
+  --checkpoints         Enable filesystem checkpoints before destructive file
+                        operations (use /rollback to restore)
+  --max-turns N         Maximum tool-calling iterations per conversation turn
+                        (default: 500, or agent.max_turns in config)
+  --run-budget SECONDS  Optional wall-clock budget in seconds for each
+                        conversation run. At 80% elapsed the agent gets a one-
+                        time wrap-up notice, and implicit provider stale
+                        timeouts are capped to the remaining budget so one
+                        hung call can't consume the run. Unset = off. Also
+                        configurable as agent.run_budget_seconds in
+                        config.yaml. Intended for one-shot/eval invocations
+                        with a hard ceiling.
+  --yolo                Bypass all dangerous command approval prompts (use at
+                        your own risk)
+  --pass-session-id     Include the session ID in the agent's system prompt
+  --ignore-user-config  Ignore ~/.hermes/config.yaml and fall back to built-in
+                        defaults (credentials in .env are still loaded).
+                        Useful for isolated CI runs, reproduction, and third-
+                        party integrations.
+  --ignore-rules        Skip auto-injection of AGENTS.md, SOUL.md,
+                        .cursorrules, memory, and preloaded skills. Combine
+                        with --ignore-user-config for a fully isolated run.
+  --safe-mode           Troubleshooting mode: disable ALL customizations —
+                        user config, AGENTS.md/memory injection, plugins, and
+                        MCP servers (implies --ignore-user-config and
+                        --ignore-rules). Use to isolate whether a problem
+                        comes from your setup or from Hermes itself.
+  --source SOURCE       Session source tag for filtering (default: cli). Use
+                        'tool' for third-party integrations that should not
+                        appear in user session lists.
+  --tui                 Launch the modern TUI instead of the classic REPL
+  --cli                 Force the classic prompt_toolkit REPL (overrides
+                        display.interface=tui)
+  --dev                 With --tui: run TypeScript sources via tsx (skip dist
+                        build)
+===== hermes model --help =====
+usage: hermes model [-h] [--refresh] [--portal-url PORTAL_URL]
+                    [--inference-url INFERENCE_URL] [--client-id CLIENT_ID]
+                    [--scope SCOPE] [--no-browser] [--timeout TIMEOUT]
+                    [--ca-bundle CA_BUNDLE] [--insecure]
+
+Interactively select your inference provider and default model
+
+options:
+  -h, --help            show this help message and exit
+  --refresh             Wipe the model picker disk cache and re-fetch every
+                        provider's live /v1/models list.
+  --portal-url PORTAL_URL
+                        Portal base URL for Nous login (default: production
+                        portal)
+  --inference-url INFERENCE_URL
+                        Inference API base URL for Nous login (default:
+                        production inference API)
+  --client-id CLIENT_ID
+                        OAuth client id to use for Nous login (default:
+                        hermes-cli)
+  --scope SCOPE         OAuth scope to request for Nous login
+  --no-browser          Do not attempt to open the browser automatically
+                        during Nous login
+  --timeout TIMEOUT     HTTP request timeout in seconds for Nous login
+                        (default: 15)
+  --ca-bundle CA_BUNDLE
+                        Path to CA bundle PEM file for Nous TLS verification
+  --insecure            Disable TLS verification for Nous login (testing only)
+===== hermes config --help =====
+usage: hermes config [-h]
+                     {show,edit,get,set,unset,path,env-path,check,migrate} ...
+
+Manage Hermes Agent configuration
+
+positional arguments:
+  {show,edit,get,set,unset,path,env-path,check,migrate}
+    show                Show current configuration
+    edit                Open config file in editor
+    get                 Print a resolved configuration value
+    set                 Set a configuration value
+    unset               Remove a configuration value
+    path                Print config file path
+    env-path            Print .env file path
+    check               Check for missing/outdated config
+    migrate             Update config with new options
+
+options:
+  -h, --help            show this help message and exit
+===== hermes cron --help =====
+usage: hermes cron [-h] [--accept-hooks]
+                   {list,create,add,edit,pause,resume,run,remove,rm,delete,status,runs,history,incidents,notepad,doctor,tick} ...
+
+Manage scheduled tasks
+
+positional arguments:
+  {list,create,add,edit,pause,resume,run,remove,rm,delete,status,runs,history,incidents,notepad,doctor,tick}
+    list                List scheduled jobs
+    create (add)        Create a scheduled job
+    edit                Edit an existing scheduled job
+    pause               Pause a scheduled job
+    resume              Resume a paused job
+    run                 Run a job on the next scheduler tick
+    remove (rm, delete)
+                        Remove a scheduled job
+    status              Check if cron scheduler is running
+    runs (history)      Show durable execution attempts
+    incidents           List or acknowledge durable cron failure incidents
+    notepad             Read/write a job's durable notepad (persistent KV
+                        across runs)
+    doctor              Check scheduled jobs for common health issues
+    tick                Run due jobs once and exit
+
+options:
+  -h, --help            show this help message and exit
+  --accept-hooks        Auto-approve unseen shell hooks without a TTY prompt
+                        (equivalent to HERMES_ACCEPT_HOOKS=1 /
+                        hooks_auto_accept: true).
+===== hermes kanban --help =====
+usage: hermes kanban [-h] [--board <slug>]
+                     {init,boards,create,swarm,list,ls,show,assign,set-model,reclaim,reassign,diagnostics,diag,link,unlink,claim,comment,attach,attachments,attach-rm,complete,edit,block,schedule,unblock,request-review,request-changes,reopen-review,promote,archive,tail,dispatch,daemon,watch,stats,notify-subscribe,notify-list,notify-unsubscribe,log,runs,heartbeat,assignees,context,specify,decompose,gc,repair} ...
+
+Durable SQLite-backed task board shared across Hermes profiles. Tasks are
+claimed atomically, can depend on other tasks, and are executed by a named
+profile in an isolated workspace. See https://hermes-
+agent.nousresearch.com/docs/user-guide/features/kanban or docs/hermes-
+kanban-v1-spec.pdf for the full design.
+
+positional arguments:
+  {init,boards,create,swarm,list,ls,show,assign,set-model,reclaim,reassign,diagnostics,diag,link,unlink,claim,comment,attach,attachments,attach-rm,complete,edit,block,schedule,unblock,request-review,request-changes,reopen-review,promote,archive,tail,dispatch,daemon,watch,stats,notify-subscribe,notify-list,notify-unsubscribe,log,runs,heartbeat,assignees,context,specify,decompose,gc,repair}
+    init                Create kanban.db if missing (idempotent)
+    boards              Manage kanban boards (one board per project /
+                        workstream)
+    create              Create a new task
+    swarm               Create a Kanban Swarm v1 graph (parallel workers →
+                        verifier → synthesizer)
+    list (ls)           List tasks
+    show                Show a task with comments + events
+    assign              Assign or reassign a task
+    set-model           Set or clear a task's model/provider override (takes
+                        effect on the next dispatch)
+    reclaim             Release an active worker claim on a running task
+    reassign            Reassign a task to a different profile, optionally
+                        reclaiming first
+    diagnostics (diag)  List active diagnostics on the current board
+    link                Add a parent->child dependency
+    unlink              Remove a parent->child dependency
+    claim               Atomically claim a ready task (prints resolved
+                        workspace path)
+    comment             Append a comment
+    attach              Attach a local file to a task
+    attachments         List a task's attachments
+    attach-rm           Delete an attachment by id
+    complete            Mark one or more tasks done
+    edit                Edit recovery fields on an already-completed task
+    block               Mark one or more tasks blocked
+    schedule            Park one or more tasks in Scheduled (waiting on time,
+                        not human input)
+    unblock             Return blocked/scheduled tasks to ready, or todo while
+                        parents remain open
+    request-review      Move a task to 'review' (implementation done, awaiting
+                        review) — NOT a block
+    request-changes     Reviewer verdict: return the active review run to its
+                        implementer
+    reopen-review       Send one or more review tasks back for changes (review
+                        -> ready/todo)
+    promote             Manually move one or more todo/blocked tasks to ready
+                        (recovery path)
+    archive             Archive one or more tasks
+    tail                Follow a task's event stream
+    dispatch            One dispatcher pass: reclaim stale, promote ready,
+                        spawn workers
+    daemon              DEPRECATED — dispatcher now runs in the gateway. Use
+                        `hermes gateway start`.
+    watch               Live-stream task_events to the terminal (Ctrl+C to
+                        exit)
+    stats               Per-status + per-assignee counts + oldest-ready age
+    notify-subscribe    Subscribe a gateway source to a task's terminal events
+                        (used by /kanban subscribe in the gateway adapter)
+    notify-list         List notification subscriptions (optionally for a
+                        single task)
+    notify-unsubscribe  Remove a gateway subscription from a task
+    log                 Print the worker log for a task (from <kanban-
+                        root>/kanban/logs/)
+    runs                Show attempt history for a task (one row per run:
+                        profile, outcome, elapsed, summary)
+    heartbeat           Emit a heartbeat event for a running task (worker
+                        liveness signal)
+    assignees           List known profiles + per-profile task counts (union
+                        of ~/.hermes/profiles/ and current assignees on the
+                        board)
+    context             Print the full context a worker sees for a task (title
+                        + body + parent results + comments).
+    specify             Flesh out a triage-column task into a concrete spec
+                        (title + body) and promote it to todo. Uses the
+                        auxiliary LLM configured under
+                        auxiliary.triage_specifier.
+    decompose           Decompose a triage-column task into a graph of child
+                        tasks routed to specialist profiles by description.
+                        Falls back to specify-style single-task promotion when
+                        the task doesn't benefit from fan-out. Uses
+                        auxiliary.kanban_decomposer.
+    gc                  Garbage-collect archived-task workspaces, old events,
+                        and old logs
+    repair              Check kanban.db integrity and auto-repair index-only
+                        corruption
+
+options:
+  -h, --help            show this help message and exit
+  --board <slug>        Board slug to operate on. Defaults to the current
+                        board (set via `hermes kanban boards switch <slug>` or
+                        the HERMES_KANBAN_BOARD env var). Use `hermes kanban
+                        boards list` to see all boards.
+===== hermes skills --help =====
+usage: hermes skills [-h]
+                     {trust,untrust,browse,search,install,inspect,list,check,update,audit,uninstall,reset,list-modified,diff,opt-out,opt-in,repair-official,publish,snapshot,tap,config} ...
+
+Search, install, inspect, audit, configure, and manage skills from skills.sh,
+well-known agent skill endpoints, GitHub, ClawHub, and other registries.
+
+positional arguments:
+  {trust,untrust,browse,search,install,inspect,list,check,update,audit,uninstall,reset,list-modified,diff,opt-out,opt-in,repair-official,publish,snapshot,tap,config}
+    trust               Trust a project so its repo-local skills
+                        (./.hermes/skills, ./.agents/skills) load
+    untrust             Revoke project-skill trust for a repo
+    browse              Browse all available skills (paginated)
+    search              Search skill registries
+    install             Install a skill
+    inspect             Preview a skill without installing
+    list                List installed skills
+    check               Check installed hub skills for updates
+    update              Update installed hub skills
+    audit               Re-scan installed hub skills
+    uninstall           Remove a hub-installed skill
+    reset               Reset a bundled skill — clears 'user-modified'
+                        tracking so updates work again
+    list-modified       List bundled skills you've edited (which `hermes
+                        update` keeps)
+    diff                Show how your copy of a bundled skill differs from the
+                        stock version
+    opt-out             Stop bundled skills from being seeded into this
+                        profile
+    opt-in              Re-enable bundled-skill seeding (undo opt-out)
+    repair-official     Backfill or restore official optional skills from repo
+                        source
+    publish             Publish a skill to a registry
+    snapshot            Export/import skill configurations
+    tap                 Manage skill sources
+    config              Interactive skill configuration — enable/disable
+                        individual skills
+
+options:
+  -h, --help            show this help message and exit
+===== hermes sessions --help =====
+usage: hermes sessions [-h]
+                       {list,export,delete,prune,archive,optimize,clean-markers,optimize-storage,repair,repair-routing,recover,stats,rename,pin,unpin,pinned,retitle-skills,browse,import} ...
+
+View and manage the SQLite session store
+
+positional arguments:
+  {list,export,delete,prune,archive,optimize,clean-markers,optimize-storage,repair,repair-routing,recover,stats,rename,pin,unpin,pinned,retitle-skills,browse,import}
+    list                List recent sessions
+    export              Export sessions to JSONL, Markdown, or QMD
+    delete              Delete a specific session
+    prune               Delete old sessions (filterable by time window,
+                        source, title, ...)
+    archive             Bulk-archive (soft-hide) sessions matching filters —
+                        no deletion
+    optimize            Reclaim disk space: merge FTS5 segments + VACUUM (no
+                        data change)
+    clean-markers       Permanently clear stale tool-call marker content left
+                        by sessions from before #78148
+    optimize-storage    Migrate the search index to the compact v23 layout
+                        (reclaims disk on large DBs)
+    repair              Repair a malformed state.db schema so hidden sessions
+                        reappear
+    repair-routing      Re-stamp gateway sessions that lost their routing
+                        identity
+    recover             Rebuild canonical session data into a separate clean
+                        database
+    stats               Show session store statistics
+    rename              Set or change a session's title
+    pin                 Pin session(s) — durable keep flag, exempt from auto-
+                        archive
+    unpin               Remove the pin (durable keep flag) from session(s)
+    pinned              List pinned sessions
+    retitle-skills      Re-title sessions whose auto-title came from a
+                        /skill's own text
+    browse              Interactive session picker — browse, search, and
+                        resume sessions
+    import              Import a Claude Code or Codex CLI session into Hermes
+
+options:
+  -h, --help            show this help message and exit
+===== hermes mcp --help =====
+usage: hermes mcp [-h] [--accept-hooks]
+                  {serve,add,remove,rm,list,ls,test,configure,config,login,reauth,picker,catalog,install} ...
+
+Manage MCP server connections and run Hermes as an MCP server. MCP servers
+provide additional tools via the Model Context Protocol. Use 'hermes mcp add'
+to connect to a new server, or 'hermes mcp serve' to expose Hermes
+conversations over MCP.
+
+positional arguments:
+  {serve,add,remove,rm,list,ls,test,configure,config,login,reauth,picker,catalog,install}
+    serve               Run Hermes as an MCP server (expose conversations to
+                        other agents)
+    add                 Add an MCP server (discovery-first install)
+    remove (rm)         Remove an MCP server
+    list (ls)           List configured MCP servers
+    test                Test MCP server connection
+    configure (config)  Toggle tool selection
+    login               Force re-authentication for an OAuth-based MCP server
+    reauth              Re-authenticate one OAuth MCP server, or all of them
+                        (--all)
+    picker              Interactive catalog picker (also the default for
+                        `hermes mcp`)
+    catalog             List Nous-approved MCPs available for one-click
+                        install
+    install             Install a catalog MCP by name (e.g. `hermes mcp
+                        install n8n`)
+
+options:
+  -h, --help            show this help message and exit
+  --accept-hooks        Auto-approve unseen shell hooks without a TTY prompt
+                        (equivalent to HERMES_ACCEPT_HOOKS=1 /
+                        hooks_auto_accept: true).
+===== hermes profile --help =====
+usage: hermes profile [-h]
+                      {list,use,create,delete,describe,show,alias,rename,export,import,install,update,info} ...
+
+positional arguments:
+  {list,use,create,delete,describe,show,alias,rename,export,import,install,update,info}
+    list                List all profiles
+    use                 Set sticky default profile
+    create              Create a new profile
+    delete              Delete a profile
+    describe            Read or set a profile's description (used by the
+                        kanban orchestrator)
+    show                Show profile details
+    alias               Manage wrapper scripts
+    rename              Rename a profile ('default': sets a display name; id
+                        unchanged)
+    export              Export a profile to archive
+    import              Import a profile from archive
+    install             Install a profile distribution from a git URL or local
+                        directory
+    update              Re-pull a distribution and apply updates (user data
+                        preserved)
+    info                Show a profile's distribution manifest (version,
+                        requirements, source)
+
+options:
+  -h, --help            show this help message and exit
+===== hermes memory --help =====
+usage: hermes memory [-h] {setup,status,off,reset} ...
+
+Set up and manage external memory provider plugins. Available providers:
+honcho, openviking, mem0, hindsight, holographic, retaindb, byterover. Only
+one external provider can be active at a time. Built-in memory
+(MEMORY.md/USER.md) is always active.
+
+positional arguments:
+  {setup,status,off,reset}
+    setup               Interactive provider selection and configuration
+    status              Show current memory provider config
+    off                 Disable external provider (built-in only)
+    reset               Erase all built-in memory (MEMORY.md and USER.md)
+
+options:
+  -h, --help            show this help message and exit
+===== hermes tools --help =====
+usage: hermes tools [-h] [--summary] {list,disable,enable,post-setup} ...
+
+Enable, disable, or list tools for CLI, Telegram, Discord, etc. Built-in
+toolsets use plain names (e.g. web, memory). MCP tools use server:tool
+notation (e.g. github:create_issue). Run 'hermes tools' with no subcommand for
+the interactive configuration UI.
+
+positional arguments:
+  {list,disable,enable,post-setup}
+    list                Show all tools and their enabled/disabled status
+    disable             Disable toolsets or MCP tools
+    enable              Enable toolsets or MCP tools
+    post-setup          Run a provider's post-setup install hook
+                        (npm/pip/binary)
+
+options:
+  -h, --help            show this help message and exit
+  --summary             Print a summary of enabled tools per platform and exit
+===== hermes project --help =====
+usage: hermes project [-h]
+                      {create,list,ls,show,add-folder,remove-folder,rename,set-primary,use,archive,restore,bind-board} ...
+
+Projects are human-named workspaces that can span multiple folders / repos.
+They anchor desktop session grouping and, when bound to a kanban board, give
+tasks a deterministic worktree + branch convention. State is per-profile.
+
+positional arguments:
+  {create,list,ls,show,add-folder,remove-folder,rename,set-primary,use,archive,restore,bind-board}
+    create              Create a new project
+    list (ls)           List projects
+    show                Show a project's details
+    add-folder          Add a folder to a project
+    remove-folder       Remove a folder from a project
+    rename              Rename a project
+    set-primary         Set the primary folder
+    use                 Set the active project
+    archive             Archive a project
+    restore             Restore an archived project
+    bind-board          Bind a kanban board to a project
+
+options:
+  -h, --help            show this help message and exit
+===== hermes gateway --help =====
+usage: hermes gateway [-h] [--accept-hooks]
+                      {run,start,stop,restart,status,install,uninstall,list,setup,migrate-legacy,enroll} ...
+
+Manage the messaging gateway (Telegram, Discord, WhatsApp, Weixin, and more)
+
+positional arguments:
+  {run,start,stop,restart,status,install,uninstall,list,setup,migrate-legacy,enroll}
+    run                 Run gateway in foreground (recommended for WSL,
+                        Docker, Termux)
+    start               Start the installed systemd/launchd background service
+    stop                Stop gateway service
+    restart             Restart gateway service
+    status              Show gateway status
+    install             Install gateway as a systemd/launchd background
+                        service
+    uninstall           Uninstall gateway service
+    list                List all profiles and their gateway status
+    setup               Configure messaging platforms
+    migrate-legacy      Remove legacy hermes.service units from pre-rename
+                        installs
+    enroll              Enroll this gateway with a relay connector (writes
+                        relay auth creds to .env)
+
+options:
+  -h, --help            show this help message and exit
+  --accept-hooks        Auto-approve unseen shell hooks without a TTY prompt
+                        (equivalent to HERMES_ACCEPT_HOOKS=1 /
+                        hooks_auto_accept: true).
+===== hermes computer-use --help =====
+usage: hermes computer-use [-h] {install,status,doctor,permissions} ...
+
+Install or check the cua-driver binary used by the `computer_use` toolset.
+Supported on macOS, Windows, and Linux. Use `hermes computer-use install` to
+fetch and run the upstream cua-driver installer. This is equivalent to the
+post-setup hook that `hermes tools` runs when you first enable the Computer
+Use toolset, and is a stable target for re-running the install if it didn't
+fire (e.g. when toggling the toolset on a returning-user setup). Use `hermes
+computer-use doctor` to run cua-driver's `health_report` MCP tool and surface
+its check matrix (TCC, bundle identity, version, platform support, ...) in
+human-readable form.
+
+positional arguments:
+  {install,status,doctor,permissions}
+    install             Install or repair the cua-driver binary
+                        (macOS/Windows/Linux)
+    status              Print whether cua-driver is installed and on PATH
+    doctor              Run cua-driver `health_report` and surface the check
+                        matrix
+    permissions         Check or grant macOS Accessibility + Screen Recording
+                        (macOS)
+
+options:
+  -h, --help            show this help message and exit
+===== hermes doctor --help =====
+usage: hermes doctor [-h] [--fix] [--live] [--ack ADVISORY_ID]
+
+Diagnose issues with Hermes Agent setup
+
+options:
+  -h, --help         show this help message and exit
+  --fix              Attempt to fix issues automatically
+  --live             Opt-in: run one bounded, read-only real-call health probe
+                     per configured tool backend
+                     (Firecrawl/FAL/browser/MCP/TTS/STT) after the static
+                     checks. Makes real network calls.
+  --ack ADVISORY_ID  Acknowledge a security advisory by ID and exit. After
+                     ack, the advisory will no longer trigger startup banners.
+                     Run `hermes doctor` first to see active advisories and
+                     their IDs.
+===== hermes status --help =====
+usage: hermes status [-h] [--all] [--deep]
+
+Display status of Hermes Agent components
+
+options:
+  -h, --help  show this help message and exit
+  --all       Show all details (redacted for sharing)
+  --deep      Run deep checks (may take longer)
+===== hermes import-agent --help =====
+usage: hermes import-agent [-h] [--source SOURCE] [--dry-run] [--overwrite]
+                           [--yes]
+                           [{claude-code,codex}]
+
+One-command import of another coding agent's setup into Hermes. Maps
+CLAUDE.md/AGENTS.md instructions, permission allowlists, MCP servers, skills,
+and memories into their Hermes equivalents. Always shows a preview before
+making changes. API keys and credentials are never imported — run 'hermes
+setup' for those.
+
+positional arguments:
+  {claude-code,codex}  Which agent to import from (default: auto-detect
+                       ~/.claude or ~/.codex)
+
+options:
+  -h, --help           show this help message and exit
+  --source SOURCE      Path to the agent's config directory (default:
+                       ~/.claude or ~/.codex)
+  --dry-run            Preview only — stop after showing what would be
+                       imported
+  --overwrite          Overwrite existing Hermes items on name conflicts
+                       (default: skip)
+  --yes, -y            Skip confirmation prompts

deliverables/scot-hermes-playbook/research/_evidence/verify_extra.py

@@ -0,0 +1,33 @@
+import json, subprocess, re
+
+data = json.load(open("/home/hermes/syslog/drafts/scot-hermes-playbook/research/video-verification.json"))
+have = {r["videoId"] for r in data}
+extra = []
+for v in ["8GjyOQy19so", "zwqhemjHq3E"]:
+    if v in have:
+        continue
+    url = f"https://www.youtube.com/watch?v={v}"
+    oe = subprocess.run(["curl", "-s", f"https://www.youtube.com/oembed?url={url}&format=json"],
+                        capture_output=True, text=True, timeout=30)
+    try:
+        oej = json.loads(oe.stdout)
+        o = {"status": "PASS", "title": oej.get("title"), "author": oej.get("author_name")}
+    except Exception:
+        o = {"status": "FAIL", "raw": oe.stdout[:200]}
+    wp = subprocess.run(["curl", "-s", "-L", url,
+                         "-H", "User-Agent: Mozilla/5.0 (Windows NT 10.0) Chrome/124.0",
+                         "-H", "Accept-Language: en-US"], capture_output=True, text=True, timeout=30)
+    html = wp.stdout
+    pub = re.search(r'"publishDate":"([\d\-T:Z]+)"', html)
+    dur = re.search(r'"lengthSeconds":"(\d+)"', html)
+    views = re.search(r'"viewCount":"(\d+)"', html)
+    rec = {"videoId": v, "oembed": o,
+           "publishDate": pub.group(1) if pub else None,
+           "lengthSeconds": int(dur.group(1)) if dur else None,
+           "views": int(views.group(1)) if views else None}
+    extra.append(rec)
+    print(json.dumps(rec))
+
+data.extend(extra)
+json.dump(data, open("/home/hermes/syslog/drafts/scot-hermes-playbook/research/video-verification.json", "w"), indent=2)
+print("total videos in ledger:", len(data))

deliverables/scot-hermes-playbook/research/_evidence/verify_videos.py

@@ -0,0 +1,38 @@
+import json, subprocess, re, sys
+
+vids = ["9GpWELm3_XI","iqN6MVzpJTk","Ta2wg6xPaY4","8tpuky8HpXw","tP6yf22OJdI",
+        "UWjh5Z4s8jY","5d02TYoOzfE","83nWNRKZTCE","6M2tItdARew","5_N84t1rUU0",
+        "UTZhvPXnmwA","1UgXUjT-QtI","6GtF_uHbGhw","CwPUOVUdApE","sCa3BtpkziQ",
+        "jmtpYUOr7_U","cu2fgknmemA","4sAmpcSOVEw","P2LIFtrRr2U"]
+
+results = []
+for v in vids:
+    url = f"https://www.youtube.com/watch?v={v}"
+    oe = subprocess.run(["curl","-s",f"https://www.youtube.com/oembed?url={url}&format=json"],
+                        capture_output=True, text=True, timeout=30)
+    try:
+        oej = json.loads(oe.stdout)
+        oembed = {"status":"PASS","title":oej.get("title"),"author":oej.get("author_name")}
+    except Exception:
+        oembed = {"status":"FAIL","raw":oe.stdout[:200]}
+    # watch page for date + duration
+    wp = subprocess.run(["curl","-s","-L",url,"-H","User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/124.0",
+                         "-H","Accept-Language: en-US,en;q=0.9"], capture_output=True, text=True, timeout=30)
+    html = wp.stdout
+    pub = re.search(r'"publishDate":"([\d\-T:Z]+)"', html)
+    upd = re.search(r'"uploadDate":"([\d\-T:Z]+)"', html)
+    dur = re.search(r'"lengthSeconds":"(\d+)"', html)
+    views = re.search(r'"viewCount":"(\d+)"', html)
+    results.append({
+        "videoId": v, "oembed": oembed,
+        "publishDate": pub.group(1) if pub else None,
+        "uploadDate": upd.group(1) if upd else None,
+        "lengthSeconds": int(dur.group(1)) if dur else None,
+        "views": int(views.group(1)) if views else None,
+        "watchpage_bytes": len(html),
+    })
+    print(json.dumps(results[-1]))
+
+with open("/home/hermes/syslog/drafts/scot-hermes-playbook/research/video-verification.json","w") as f:
+    json.dump(results, f, indent=2)
+print("saved video-verification.json")

deliverables/scot-hermes-playbook/research/_evidence/video-verification.json

@@ -0,0 +1,271 @@
+[
+  {
+    "videoId": "9GpWELm3_XI",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent Explained In 5 Minutes",
+      "author": "CodeHead"
+    },
+    "publishDate": "2026-05-23T08:00:27-07:00",
+    "uploadDate": "2026-05-23T08:00:27-07:00",
+    "lengthSeconds": 293,
+    "views": 251275,
+    "watchpage_bytes": 1419048
+  },
+  {
+    "videoId": "iqN6MVzpJTk",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent by Nous Research: The Open-Source Agent Model Everyone Is Switching To",
+      "author": "Praveen Govindaraj"
+    },
+    "publishDate": "2026-02-26T21:56:54-08:00",
+    "uploadDate": "2026-02-26T21:56:54-08:00",
+    "lengthSeconds": 193,
+    "views": 3140,
+    "watchpage_bytes": 1305120
+  },
+  {
+    "videoId": "Ta2wg6xPaY4",
+    "oembed": {
+      "status": "PASS",
+      "title": "Learn 95% of Hermes Agent in 31 Minutes",
+      "author": "Sharbel A."
+    },
+    "publishDate": "2026-08-09T07:00:19-07:00",
+    "uploadDate": "2026-08-09T07:00:19-07:00",
+    "lengthSeconds": 1888,
+    "views": 129313,
+    "watchpage_bytes": 1468130
+  },
+  {
+    "videoId": "8tpuky8HpXw",
+    "oembed": {
+      "status": "PASS",
+      "title": "Better than OpenClaw? Testing Hermes Agent w/ Qwen 3 model",
+      "author": "Tonbi's AI Garage"
+    },
+    "publishDate": "2026-03-11T07:00:14-07:00",
+    "uploadDate": "2026-03-11T07:00:14-07:00",
+    "lengthSeconds": 907,
+    "views": 18167,
+    "watchpage_bytes": 1326925
+  },
+  {
+    "videoId": "tP6yf22OJdI",
+    "oembed": {
+      "status": "PASS",
+      "title": "Did Hermes Agent just kill OpenClaw? (full guide)",
+      "author": "Alex Finn"
+    },
+    "publishDate": "2026-03-31T06:15:10-07:00",
+    "uploadDate": "2026-03-31T06:15:10-07:00",
+    "lengthSeconds": 835,
+    "views": 132128,
+    "watchpage_bytes": 1390199
+  },
+  {
+    "videoId": "UWjh5Z4s8jY",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Co-Founder on Building an AI Agent That Improves Itself | Karan Malhotra",
+      "author": "Peter Yang"
+    },
+    "publishDate": "2026-08-02T06:00:12-07:00",
+    "uploadDate": "2026-08-02T06:00:12-07:00",
+    "lengthSeconds": 2804,
+    "views": 36613,
+    "watchpage_bytes": 1386664
+  },
+  {
+    "videoId": "5d02TYoOzfE",
+    "oembed": {
+      "status": "PASS",
+      "title": "Use This To Make The Hermes Agent Basically Free",
+      "author": "AI LABS"
+    },
+    "publishDate": "2026-07-01T07:00:26-07:00",
+    "uploadDate": "2026-07-01T07:00:26-07:00",
+    "lengthSeconds": 788,
+    "views": 54858,
+    "watchpage_bytes": 1412833
+  },
+  {
+    "videoId": "83nWNRKZTCE",
+    "oembed": {
+      "status": "PASS",
+      "title": "Meet the AI Agent That Grows With You Hermes Agent by Nous Research",
+      "author": "Eddy Says Hi #EddySaysHi"
+    },
+    "publishDate": "2026-03-21T13:00:09-07:00",
+    "uploadDate": "2026-03-21T13:00:09-07:00",
+    "lengthSeconds": 366,
+    "views": 465,
+    "watchpage_bytes": 1254068
+  },
+  {
+    "videoId": "6M2tItdARew",
+    "oembed": {
+      "status": "PASS",
+      "title": "The AI Agent That Never Forgets: Meet Hermes Agent by Nous Research",
+      "author": "Siggi"
+    },
+    "publishDate": "2026-03-11T13:53:17-07:00",
+    "uploadDate": "2026-03-11T13:53:17-07:00",
+    "lengthSeconds": 371,
+    "views": 1199,
+    "watchpage_bytes": 1267812
+  },
+  {
+    "videoId": "5_N84t1rUU0",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent Fundamentals In 29 Minutes",
+      "author": "Tina Huang"
+    },
+    "publishDate": "2026-07-20T09:37:02-07:00",
+    "uploadDate": "2026-07-20T09:37:02-07:00",
+    "lengthSeconds": 1780,
+    "views": 462764,
+    "watchpage_bytes": 1561142
+  },
+  {
+    "videoId": "UTZhvPXnmwA",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent: Agents that grow with you |Episode #357|",
+      "author": "Practical AI"
+    },
+    "publishDate": "2026-05-20T15:00:17-07:00",
+    "uploadDate": "2026-05-20T15:00:17-07:00",
+    "lengthSeconds": 2853,
+    "views": 1888,
+    "watchpage_bytes": 1329765
+  },
+  {
+    "videoId": "1UgXUjT-QtI",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent: Why Everyone's Ditching OpenClaw in 2026",
+      "author": "Luke Alexander AI"
+    },
+    "publishDate": "2026-03-26T07:10:29-07:00",
+    "uploadDate": "2026-03-26T07:10:29-07:00",
+    "lengthSeconds": 1083,
+    "views": 13625,
+    "watchpage_bytes": 1321848
+  },
+  {
+    "videoId": "6GtF_uHbGhw",
+    "oembed": {
+      "status": "PASS",
+      "title": "Every Level of Hermes Agent Explained",
+      "author": "Jack Roberts"
+    },
+    "publishDate": "2026-06-17T12:27:42-07:00",
+    "uploadDate": "2026-06-17T12:27:42-07:00",
+    "lengthSeconds": 1535,
+    "views": 162977,
+    "watchpage_bytes": 1577121
+  },
+  {
+    "videoId": "CwPUOVUdApE",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent: The Ultimate Beginner\u2019s Guide",
+      "author": "Metics Media"
+    },
+    "publishDate": "2026-04-24T06:59:04-07:00",
+    "uploadDate": "2026-04-24T06:59:04-07:00",
+    "lengthSeconds": 2228,
+    "views": 118612,
+    "watchpage_bytes": 1637578
+  },
+  {
+    "videoId": "sCa3BtpkziQ",
+    "oembed": {
+      "status": "PASS",
+      "title": "100 Days With Hermes Agent in 21 Minutes",
+      "author": "Sharbel A."
+    },
+    "publishDate": "2026-06-17T07:47:26-07:00",
+    "uploadDate": "2026-06-17T07:47:26-07:00",
+    "lengthSeconds": 1279,
+    "views": 57581,
+    "watchpage_bytes": 1454230
+  },
+  {
+    "videoId": "jmtpYUOr7_U",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent Just Killed OpenClaw (Full Tutorial)",
+      "author": "Leon van Zyl"
+    },
+    "publishDate": "2026-04-28T04:19:38-07:00",
+    "uploadDate": "2026-04-28T04:19:38-07:00",
+    "lengthSeconds": 1199,
+    "views": 15988,
+    "watchpage_bytes": 1510488
+  },
+  {
+    "videoId": "cu2fgknmemA",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent The 24/7 Self-Evolving AI Agent!",
+      "author": "WorldofAI"
+    },
+    "publishDate": "2026-04-07T00:01:34-07:00",
+    "uploadDate": "2026-04-07T00:01:34-07:00",
+    "lengthSeconds": 555,
+    "views": 46889,
+    "watchpage_bytes": 1545788
+  },
+  {
+    "videoId": "4sAmpcSOVEw",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent - Crash Course for Beginners (AI Agent)",
+      "author": "Adrian Twarog"
+    },
+    "publishDate": "2026-07-21T01:20:41-07:00",
+    "uploadDate": "2026-07-21T01:20:41-07:00",
+    "lengthSeconds": 1338,
+    "views": 46484,
+    "watchpage_bytes": 1585548
+  },
+  {
+    "videoId": "P2LIFtrRr2U",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent: New FREE OpenClaw Alternative!",
+      "author": "Julian Goldie SEO"
+    },
+    "publishDate": "2026-03-09T14:00:32-07:00",
+    "uploadDate": "2026-03-09T14:00:32-07:00",
+    "lengthSeconds": 735,
+    "views": 9975,
+    "watchpage_bytes": 1353286
+  },
+  {
+    "videoId": "8GjyOQy19so",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent Full Tutorial INSTALLATION + USECASES",
+      "author": "CodeHead"
+    },
+    "publishDate": "2026-05-14T08:00:23-07:00",
+    "lengthSeconds": 467,
+    "views": 64285
+  },
+  {
+    "videoId": "zwqhemjHq3E",
+    "oembed": {
+      "status": "PASS",
+      "title": "Hermes Agent vs OpenClaw",
+      "author": "Sharbel A."
+    },
+    "publishDate": "2026-04-20T07:14:00-07:00",
+    "lengthSeconds": 928,
+    "views": 35360
+  }
+]

deliverables/scot-hermes-playbook/research/_evidence/yt_parse.py

@@ -0,0 +1,10 @@
+import re, sys
+
+html = open(sys.argv[1], encoding='utf-8', errors='ignore').read()
+ids = re.findall(r'"videoRenderer":\{"videoId":"([\w-]{11})"', html)
+print("videoRenderer hits:", len(set(ids)))
+for vid in dict.fromkeys(ids):
+    m = re.search(r'"videoId":"%s".{0,3000}?"title":\{"runs":\[\{"text":"(.*?)"\}' % vid, html, re.S)
+    ch = re.search(r'"videoId":"%s".{0,6000}?"ownerText":\{"runs":\[\{"text":"(.*?)"' % vid, html, re.S)
+    dur = re.search(r'"videoId":"%s".{0,4000}?"lengthText":\{"accessibility".{0,400}?"simpleText":"(.*?)"' % vid, html, re.S)
+    print((vid, m.group(1) if m else "?", ch.group(1) if ch else "?", dur.group(1) if dur else "?"))

deliverables/scot-hermes-playbook/research/sources.md

@@ -0,0 +1,42 @@
+# 06 — Sources
+
+Access date for ALL entries: **2026-09-11** (via citation ledger `sources.py`; doc URLs additionally confirmed HTTP 200 by curl -L).
+
+## Official docs (hermes-agent.nousresearch.com)
+| # | URL | Supported |
+|---|-----|-----------|
+| 1 | https://hermes-agent.nousresearch.com/docs | Docs index; overall feature map |
+| 3 | https://hermes-agent.nousresearch.com/docs/user-guide/configuration | Config sections, SOUL.md, checkpoints |
+| 4 | https://hermes-agent.nousresearch.com/docs/reference/slash-commands | Slash command registry (03) |
+| 5 | https://hermes-agent.nousresearch.com/docs/reference/tools-reference | Toolset inventory (02 §6) |
+| 6 | https://hermes-agent.nousresearch.com/docs/user-guide/features/cron | Cron surface (02 §9) |
+| 7 | https://hermes-agent.nousresearch.com/docs/user-guide/features/kanban | Kanban surface (02 §8) |
+| 8 | https://hermes-agent.nousresearch.com/docs/user-guide/features/mcp | MCP surface + `hermes mcp serve` (02 §5, 04 P3) |
+| 9 | https://hermes-agent.nousresearch.com/docs/user-guide/features/memory | Memory surface (02 §2) |
+| 10 | https://hermes-agent.nousresearch.com/docs/user-guide/profiles | Profiles (02 §13) |
+| 11 | https://hermes-agent.nousresearch.com/docs/integrations/providers | Model/provider routing (02 §12) |
+| 12 | https://hermes-agent.nousresearch.com/docs/user-guide/messaging/ | Gateway platforms (02 §15) |
+| 13 | https://hermes-agent.nousresearch.com/docs/user-guide/features/curator | Skill maintenance (02 §3) |
+| 14 | https://hermes-agent.nousresearch.com/docs/reference/cli-commands | CLI command index cross-check (03) |
+| 15 | https://hermes-agent.nousresearch.com/docs/reference/skills-catalog | Skills catalog (02 §3) |
+
+## GitHub
+| # | URL | Supported |
+|---|-----|-----------|
+| 2 | https://github.com/nousresearch/hermes-agent | Repo identity, learning-loop description (01, 02) |
+
+## Local primary sources (not web URLs; verified on this host)
+- Live CLI help output, Hermes Agent v0.21.1 (2026.9.7), reference install (Syslog kagentz): `hermes --help` + `hermes {chat,model,config,cron,kanban,skills,sessions,mcp,profile,memory,tools,project,gateway,computer-use,doctor,status,import-agent} --help` → raw dump `cli-help-dump.txt` (577 lines). Basis for all VERIFIED-LIVE tags in 01/02/03/04.
+- `/home/hermes/.hermes/skills/autonomous-ai-agents/delegate-coding-agent/SKILL.md` (v1.0.0) + `references/claude-code.md` (v2.2.1) → 04 Patterns 1-2, 01 Claude Code column.
+- `/home/hermes/.hermes/skills/autonomous-ai-agents/merge-reconciler/SKILL.md` → 04 Pattern 2.
+- `/home/hermes/.hermes/skills/autonomous-ai-agents/computer-use/SKILL.md` (v2.0.0) → 04 Pattern 5, 02 §11.
+
+## YouTube verification
+- YouTube search results pages (scraped 2026-09-11): `https://www.youtube.com/results?search_query=hermes+agent+nous+research` and `...nous+research+hermes+agent+official`
+- oEmbed endpoint per video: `https://www.youtube.com/oembed?url=https://www.youtube.com/watch?v=<ID>&format=json` — all 21 checked IDs returned PASS (HTTP 200, title/author match). Raw evidence incl. publishDate/lengthSeconds/viewCount per watch page: `video-verification.json`.
+- 17 listed in 05-videos.md + 4 spares; 21/21 pass, 0 fail.
+
+## Explicit gaps (could not close)
+1. No official Nous Research-produced tutorial video was found — video list is third-party ecosystem content (disclosed in 05).
+2. Slash commands were verified DOC-ONLY (https://hermes-agent.nousresearch.com/docs/reference/slash-commands); they require an interactive session to exercise, which this headless run does not have. CLI equivalents were verified live.
+3. `hermes-agent.nousresearch.com/docs/developer-guide/` returned 404 — developer docs live in-repo (`AGENTS.md` in the GitHub repo), not as a docs site section.

docs/AUTHORING-GUIDE.md

@@ -211,6 +211,40 @@ Errors tell the operator what went wrong and what to do about it. Be specific:
    Check router /health/unified at http://192.168.68.116/health/unified instead."
 ```
 
+### Report provenance
+
+Every report a contract produces must lead with the **absolute path the probe
+executed from** — `pwd -P`, or the running script's absolute path. A live-state
+report without provenance is unactionable: a report from a stale copy (a worktree
+clone, a retired cron entry, a diverged consumer) looks identical to a live
+fault, and the team burns rounds repairing healthy infrastructure. This is not
+optional. The 2026-09-09 probe-drift rounds cost three false `DEGRADED` reports
+because a stale consumer probed the wrong port and nothing in the report said
+where it ran.
+
+Pair it with the **scoped any-HTTP-response liveness rule**: for unauthenticated
+or auth-gated endpoints — where any HTTP answer proves a listener is up (the
+PVE API's `401`, LiteLLM health's `301` redirect) — a probe is ALIVE on ANY HTTP
+status, including `301` redirects and `401`/`403` auth challenges. **DOWN =
+connection refused (`000`) or timeout only.**
+
+Probes whose success condition is specifically a bare `200` are NOT covered by
+the any-HTTP rule. On those — authenticated probes such as the Zulip message
+POST and the router `/health` — an unexpected status (`401`/`403` from a bad or
+missing credential, `5xx`, or anything other than the expected `200`) is an
+**ALERT**, not "alive".
+
+```markdown
+**Report format**: Begin every report with the absolute execution path
+(`pwd -P` / script path). On auth-gated endpoints, alive = ANY HTTP status and
+DOWN = `000`/timeout only; on probes whose expected result is `200`, any other
+status is an alert.
+```
+
+The lint pipeline enforces the provenance clause: any contract with a
+`**Report format**` line must state an absolute path (`pwd -P`, `absolute path`,
+or `executed from`).
+
 ### Comments
 
 Comments in contracts explain WHY, not WHAT. The execution steps say what to

docs/probe-drift-round2-evidence.md

@@ -0,0 +1,278 @@
+# Probe-drift round 2 — per-leg before/after evidence
+
+**Date:** 2026-09-10
+**Worktree (absolute execution path):** `/root/.treehouse/prose-contracts-9ce5f3/3/prose-contracts`
+**Branch:** `fm/probe-drift-round2-20260909`
+
+Every command below was run from the absolute path above; output is pasted
+verbatim. This is the evidence trail for the four scoped corrections; it is not
+a contract (never `prose run` it).
+
+---
+
+## Leg 1 — agent-health-check (item 1)
+
+**Before** — from `/root/.treehouse/prose-contracts-9ce5f3/3/prose-contracts`,
+`python3 scripts/agent-health-check.py --no-deploy` (v2, base of this branch):
+
+```
+🏥 Agent Health Check v2 — 2026-09-10 01:16 UTC
+
+🔑 LiteLLM Keys:
+  ✅ tanko: key valid → syslog-auto
+  ✅ abiba: key valid → syslog-auto
+  ✅ koby: key valid → syslog-auto
+  ✅ koonimo: key valid → syslog-auto
+
+🎮 GPU Port Health:
+  ✅ gpu-rtx3090 (.8): healthy (pid=472206)
+  ✅ gpu-rtx5070 (.110): healthy (pid=207601)
+  ✅ gpu-strixhalo (.15): healthy (pid=4098872)
+
+🤖 Agent Gateways:
+  ✅ tanko: DSH (DeepSeek Harness) — no Hermes gateway since 2026-08-27 (CT 112, SSH OK)
+  ⚠️ abiba: gw=no-state-file zulip=? streaming=no errors_10m=0 pid=?
+  ✅ koby: gw=running zulip=connected streaming=no errors_10m=0 pid=360900
+  ✅ koonimo: gw=running zulip=connected streaming=no errors_10m=0 pid=155125
+
+🖥️  CT Liveness:
+  ✅ tanko (CT 112 on amdpve): running
+  ✅ abiba (CT 100 on minipve): running
+  ❌ koby (CT 111 on amdpve): PVE UNREACHABLE
+  ✅ koonimo (CT 113 on amdpve): running
+
+📝 Config Integrity:
+  ⏭️ tanko: DSH — no Hermes config.yaml since 2026-08-27
+  ✅ abiba: config.yaml valid YAML
+  ✅ koby: config.yaml valid YAML
+  ✅ koonimo: config.yaml valid YAML
+
+🔌 Wrapper/CLI Integrity:
+  ⏭️ tanko: DSH — no hermes CLI wrapper since 2026-08-27
+  ⚠️  abiba: wrapper infisical path may be wrong (infisical at /usr/bin/infisical)
+  ❌ abiba: hermes-real NOT FOUND (wrapper broken)
+  ⚠️  abiba: .env may be missing LITELLM_API_KEY entry
+  ⚠️  koby: wrapper infisical path may be wrong (infisical at /usr/bin/infisical)
+  ❌ koby: hermes-real NOT FOUND (wrapper broken)
+  ✅ koby: wrapper + .env key present
+  ⚠️  koonimo: wrapper infisical path may be wrong (infisical at /usr/bin/infisical)
+  ✅ koonimo: wrapper + .env key present
+
+🔐 Vault Secrets:
+  ✅ tanko: vault TANKO_LITELLM_API_KEY=sk-...x6uw
+  ✅ koby: vault KOBY_LITELLM_API_KEY=sk-...jxlg
+  ✅ koonimo: vault KOONIMO_LITELLM_API_KEY=sk-...Y0KQ
+
+❌ 6 FAILURE(S): ct-unreachable:koby:192.168.68.15 | wrapper-infisical-path:abiba | wrapper-no-hermes-real:abiba | wrapper-infisical-path:koby | wrapper-no-hermes-real:koby | wrapper-infisical-path:koonimo
+```
+
+Root causes (all stale expectations; no live fault):
+
+| Failure | Why it was stale |
+|---|---|
+| `ct-unreachable:koby:192.168.68.15` | CT 111 (tdunna/koby) runs on **storepve (.6)**, not amdpve (.15). |
+| `wrapper-*:abiba` | Abiba is pi-only since the harness purge. `/root/.local/bin/hermes` is a dangling symlink; no `hermes-real`, no `~/.hermes/.env`. |
+| `wrapper-*:koby` | Koby is **report-only** (captain ruling 2026-08-17, Rule 17): detect and report, never repair — its legs must not count as fleet failures. Koby's wrapper is also the genuine no-infisical case: it sources `~/.hermes/.env` rather than `/usr/bin/infisical`, which the check now accepts. |
+| `wrapper-infisical-path:koonimo` | Koonimo's wrapper **does** reference `/usr/bin/infisical` — but past the old check's `head -20` window, so the check looked for the path in the wrong slice and false-failed. The fix that mattered was reading the full wrapper body (and then verifying any absolute infisical path it finds actually exists). |
+
+**After** — same absolute path, `python3 scripts/agent-health-check.py --no-deploy` (v4):
+
+```
+$ pwd -P
+/root/.treehouse/prose-contracts-9ce5f3/3/prose-contracts
+$ python3 scripts/agent-health-check.py --no-deploy
+🏥 Agent Health Check v4 — 2026-09-10 01:22 UTC
+📍 executed from: script=/root/.treehouse/prose-contracts-9ce5f3/3/prose-contracts/scripts/agent-health-check.py cwd=/root/.treehouse/prose-contracts-9ce5f3/3/prose-contracts
+
+🔑 LiteLLM Keys:
+  ✅ tanko: key valid → syslog-auto
+  ✅ abiba: key valid → syslog-auto
+  ✅ koby: key valid → syslog-auto
+  ✅ koonimo: key valid → syslog-auto
+
+🎮 GPU Port Health:
+  ✅ gpu-rtx3090 (.8): healthy (pid=472206)
+  ✅ gpu-rtx5070 (.110): healthy (pid=207601)
+  ✅ gpu-strixhalo (.15): healthy (pid=4098872)
+
+🤖 Agent Gateways:
+  ✅ tanko: DSH (DeepSeek Harness) — no Hermes gateway since 2026-08-27 (CT 112, SSH OK)
+  ✅ abiba: pi-only runtime — no Hermes gateway since the harness purge (CT 100, SSH OK)
+  🔍 koby: REPORT-ONLY mode (diagnostic only, no repairs on .129)
+  ✅ koby: gateway running (pid=360900, report-only mode)
+  ✅ koonimo: gw=running zulip=connected streaming=no errors_10m=0 pid=155125
+
+🖥️  CT Liveness:
+  ✅ tanko (CT 112 on amdpve): running
+  ✅ abiba (CT 100 on minipve): running
+  ✅ koby (CT 111 on storepve): running
+  ✅ koonimo (CT 113 on amdpve): running
+
+📝 Config Integrity:
+  ⏭️ tanko: DSH — no Hermes config.yaml since 2026-08-27
+  ⏭️ abiba: pi-only runtime — no Hermes config.yaml since the harness purge
+  ✅ koby: config.yaml valid YAML
+  ✅ koonimo: config.yaml valid YAML
+
+🔌 Wrapper/CLI Integrity:
+  ⏭️ tanko: DSH — no hermes CLI wrapper since 2026-08-27
+  ⏭️ abiba: pi-only runtime — no hermes CLI wrapper since the harness purge
+  ℹ️  koby: wrapper resolves creds without infisical (e.g. ~/.hermes/.env) — OK
+  ❌ koby: hermes-real NOT FOUND (wrapper broken)
+  🔍 report-only (koby): wrapper-no-hermes-real:koby — reported, not counted/repaired
+  ✅ koby: wrapper + .env key present
+  ✅ koonimo: wrapper infisical path OK
+  ✅ koonimo: wrapper + .env key present
+
+🔐 Vault Secrets:
+  ✅ tanko: vault TANKO_LITELLM_API_KEY=sk-...x6uw
+  ✅ koby: vault KOBY_LITELLM_API_KEY=sk-...jxlg
+  ✅ koonimo: vault KOONIMO_LITELLM_API_KEY=sk-...Y0KQ
+
+✅ All checks passed
+exit=0
+```
+
+**Live vantage proof** (same worktree):
+
+```
+$ ssh root@192.168.68.15 "pct status 111"
+Configuration file 'nodes/amdpve/lxc/111.conf' does not exist
+$ ssh root@192.168.68.6 "pct status 111; pct list | grep '^ *111'"
+status: running
+111        running                 tdunna
+$ ssh root@192.168.68.129 "hostname"
+tdunna
+```
+
+---
+
+## Leg 2 — infrastructure-monitoring PVE API (item 2)
+
+**Before** — the contract's probe, aimed at the monitoring host CT 116:
+
+```
+$ curl -s -o /dev/null -w '%{http_code}' https://192.168.68.116:8006/api2/json
+000
+```
+
+CT 116 runs no `pveproxy`, so it never answers on `:8006`. The probe target was
+wrong, which is what read as PVE-API `000`.
+
+**After** — probing the five real cluster nodes (`:8006/api2/json/version`),
+alive under the any-HTTP-response rule (`401` = up, unauthenticated):
+
+```
+$ for node in 192.168.68.9 192.168.68.5 192.168.68.15 192.168.68.6 192.168.68.12; do
+    printf '%s:8006 -> %s\n' "$node" "$(curl -sk -o /dev/null -w '%{http_code}' --connect-timeout 5 "https://$node:8006/api2/json/version")"
+  done
+192.168.68.9:8006 -> 401
+192.168.68.5:8006 -> 401
+192.168.68.15:8006 -> 401
+192.168.68.6:8006 -> 401
+192.168.68.12:8006 -> 401
+```
+
+`401` on every node = alive by design. `DOWN` is `000`/timeout only. (The
+contract's LiteLLM probe was the same class: `/litellm/health` answers `301` →
+`/litellm/health/liveliness`, so it is now specified as any-HTTP too.)
+
+---
+
+## Leg 3 — gpu-monitor GPU probes (item 3)
+
+**Before** — the false alarm came from probing bare port 80 on GPU hosts:
+
+```
+$ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.8/health
+000
+$ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.110/health
+000
+```
+
+Nothing listens on GPU port 80, so the monitor reported
+`DEGRADED — GPU-rtx3090 000, GPU-rtx5070 000` three times on 2026-09-09.
+
+**After** — the real endpoints answer:
+
+```
+$ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.8:8080/health
+200
+$ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.110:8080/health
+200
+$ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.15:8080/health
+200
+$ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116/health/unified
+301        # Location: http://192.168.68.116/gpu/gpu-data — the same payload
+$ curl -s -o /dev/null -w '%{http_code}' -L http://192.168.68.116/health/unified
+200
+```
+
+`301` is healthy under the any-HTTP-response rule. The contract now requires GPU
+health on `:8080` (or router `/health/unified`) and forbids bare port 80 on a
+GPU host.
+
+---
+
+## Leg 4 — report provenance (item 4)
+
+Every contract report must now lead with the absolute path it executed from.
+`docs/AUTHORING-GUIDE.md` documents the rule and `scripts/prose-lint.sh`
+enforces it:
+
+```
+$ pwd -P
+/root/.treehouse/prose-contracts-9ce5f3/3/prose-contracts
+$ bash scripts/prose-lint.sh
+  ✅ Report provenance present in all report-format contracts
+...
+✅ LINT PASSED (12 warning(s))
+```
+
+The health script prints `📍 executed from: script=… cwd=…` and includes
+`execution_path`/`cwd` in `--json` output.
+
+---
+
+## Full suite
+
+```
+$ pwd -P
+/root/.treehouse/prose-contracts-9ce5f3/3/prose-contracts
+$ python3 -m pytest -q
+24 passed
+$ shellcheck scripts/prose-lint.sh
+(clean)
+```
+
+---
+
+## Follow-up findings (observed, intentionally NOT changed here)
+
+These are adjacent stale expectations discovered while verifying the four
+scoped legs. Each touches a CRITICAL/HIGH-sensitivity artifact or an unrelated
+script, so it is recorded for the captain/verify mate rather than silently
+repaired.
+
+1. **`infrastructure-control.prose.md` (CRITICAL) CT 111 node assignment.**
+   Lines ~109 and ~615 place `tdunna` (CT 111, koby) on **amdpve**. Live
+   verification on 2026-09-10 shows `pct status 111` = `running` on
+   **storepve (.6)** and `Configuration file 'nodes/amdpve/lxc/111.conf' does
+   not exist` on .15. `agent-health-check.py` now carries the live-verified
+   `storepve` mapping (the script is not the topology source of truth); the
+   CRITICAL contract itself needs an authorized correction.
+2. **Strix Halo `:8080` firewall claim is stale.** `prose-ai-review.sh`
+   ground-truth rule #4 and `gpu-monitor.prose.md` say `:8080` is firewalled to
+   `.116` only and `.24` cannot probe it. Live on .15:
+   `-A INPUT -s 192.168.68.24/32 -p tcp --dport 8080 -j ACCEPT`, and a probe
+   from .24 returns `200`. The contract keeps routing Strix via the router
+   (safe), but the claim no longer matches iptables.
+3. **`contract-registry.yaml` references `agent-health-check.prose.md`**, which
+   does not exist in the repo. The registry entry (with `koby_action: skip_heal`)
+   is aspirational/stale.
+4. **Pre-existing script defects, untouched:** `scripts/pm2-self-heal.sh` has a
+   bash syntax error at lines 19–20 (`bash -n` fails), and `shellcheck` fails on
+   five untouched scripts (`netbird-add-domain.sh`, `pct-run.sh`,
+   `pm2-self-heal.sh`, `prose-ai-review.sh`, `swap-gpu-dense-model.sh`).
+   `scripts/prose-lint.sh` — the one shell file touched here — is now
+   shellcheck-clean.

gpu-fleet.prose.md

@@ -19,7 +19,7 @@ triggers:
   - on model add/remove
   - on GPU health degradation
   - on agent key rotation
-  - on router restart (roster must be loaded)
+  - on harness container restart (LiteLLM reloads its model list)
 ---
 
 ## Maintains
@@ -36,46 +36,42 @@ triggers:
 - prometheus: { status: "running", targets: 5 } — Scrapes GPU :9400 exporters + LiteLLM
 - port_conflict_detection: { status: "active" } — All 3 GPU wrappers detect ghost processes before binding
 
-## Fleet Topology (Current — July 2026)
+## Fleet Topology (Current — 2026-09-11, router decommissioned)
 
 ```
 ┌──────────────────────────────────────────────────────────────────┐
 │  CT 116 (192.168.68.116) — Inference Harness Host                │
 │                                                                  │
 │  nginx:80 (entrypoint)                                           │
-│  ├─ /v1/*       → harness-litellm:4000   (API requests)         │
+│  ├─ /v1/*       → harness-litellm:4000   (API requests)          │
 │  ├─ /admin/*    → harness-litellm:4000   (admin endpoints)       │
 │  ├─ /dashboard/ → harness-dashboard:3000 (harness UI)            │
-│  ├─ /litellm/*  → harness-litellm:4000   (LiteLLM UI + API)     │
+│  ├─ /litellm/*  → harness-litellm:4000   (LiteLLM UI + API)      │
 │  ├─ /health/*   → harness-litellm:4000   (health probes)         │
 │  └─ /gpu/*      → 192.168.68.24:9100     (fleet monitor)         │
 │                                                                  │
 │  Containers:                                                     │
-│  ┌──────────┐  ┌──────────┐  ┌──────────┐  ┌──────────┐        │
-│  │ LiteLLM  │  │ Router   │  │Dashboard │  │ Grafana   │        │
-│  │ :4000    │  │ :9000    │  │ :3000    │  │ :3000     │        │
-│  │ keys+sync│  │deprecated│  │ harness  │  │ Prometheus│        │
-│  │ fallback │  │not in    │  │ UI       │  │ data src  │        │
-│  └──────────┘  └───┬──────┘  └──────────┘  └──────────┘        │
-│                    │                                             │
-│  ┌──────────┐  ┌──────────┐  ┌──────────┐                       │
-│  │PostgreSQL│  │  Redis   │  │Prometheus│                       │
-│  │ :5432    │  │ :6379    │  │ :9090    │                       │
-│  └──────────┘  └──────────┘  └──────────┘                       │
-└────────────────────┼─────────────────────────────────────────────┘
-                     │
-     ┌───────────────┼───────────────┬──────────────────┐
-     │               │               │                  │
-┌────▼─────┐  ┌──────▼──────┐  ┌────▼──────┐  ┌───────▼──────┐
-│ CT 8     │  │ CT 110      │  │ CT 15     │  │ pi (.24)     │
-│ RTX 3090 │  │ RTX 5070    │  │ Strix Halo│  │ GPU Monitor  │
-│ 24GB     │  │ 12GB        │  │ 64GB UMA  │  │ :9100        │
-│ 128K ctx │  │ 128K ctx    │  │ 128K ctx  │  │ Watchdog     │
-│ qwen3.6  │  │ Qwen3.5-9B  │  │ qwen3.5   │  │ Prometheus   │
-│ 27B-code │  │ :8080       │  │ -35B-udq4 │  │ exporter     │
-│ :8080    │  │ :9400 (exp) │  │ :9400(exp)│  │ :9401        │
-│ :9400    │  └─────────────┘  └───────────┘  └──────────────┘
-└──────────┘
+│  ┌──────────┐  ┌──────────┐  ┌──────────┐                        │
+│  │ LiteLLM  │  │Dashboard │  │ Grafana  │                        │
+│  │ :4000    │  │ :3000    │  │ :3001    │                        │
+│  │ keys+sync│  │ harness  │  │Prometheus│                        │
+│  │ fallback │  │ UI       │  │ data src │                        │
+│  └──────────┘  └──────────┘  └──────────┘                        │
+│                                                                  │
+│  ┌──────────┐  ┌──────────┐  ┌──────────┐                        │
+│  │PostgreSQL│  │  Redis   │  │Prometheus│                        │
+│  │ :5432    │  │ :6379    │  │ :9090    │                        │
+│  └──────────┘  └──────────┘  └──────────┘                        │
+└───────┼──────────────────────────────────────────────────────────┘
+        │
+      ┌─┴─────────────┬───────────────┬───────────────┐
+      │               │               │               │
+┌─────▼──────┐  ┌─────▼──────┐  ┌─────▼──────┐  ┌─────▼──────┐
+│ CT 8       │  │ CT 110     │  │ CT 15      │  │ pi (.24)   │
+│ RTX 3090   │  │ RTX 5070   │  │ Strix Halo │  │ GPU Monitor│
+│ 24GB       │  │ 12GB       │  │ 64GB UMA   │  │ :9100      │
+│ :8080      │  │ :9400 exp  │  │ :9400 exp  │  │ :9401      │
+└────────────┘  └────────────┘  └────────────┘  └────────────┘
 ```
 
 ## Stable Role-Based Aliases (Introduced 2026-07-15)
@@ -105,7 +101,7 @@ but are deprecated for agent configs. Only the stable aliases survive model swap
 |-------|-----|--------|---------|---------|
 | Qwen3.8-27B-Uncensored-Q4_K_M | RTX 3090 (.8:8080) | **0.55** | 500 | **300s** |
 
-Note: All syslog-auto entries route directly to GPUs with `api_key: not-needed`. The router (port 9000) is NOT in the inference path.
+Note: All syslog-auto entries route directly to GPUs with `api_key: not-needed`. The router (port 9000) was decommissioned 2026-09-11 and is NOT in the inference path.
 
 ### Direct Model Endpoints
 
@@ -153,7 +149,7 @@ Note: All syslog-auto entries route directly to GPUs with `api_key: not-needed`.
 6. Cleanup model files (optional)
 
 ### heal
-1. Check all GPUs via router internal `:9000/health/unified`
+1. Check all GPUs via gpu-monitor `{{gpu_dashboard_url}}/gpu-data`
 2. Check LiteLLM health via nginx `:80/litellm/health/liveliness`
 3. Reset stuck circuit breakers if idle (Redis)
 4. Restart dead llama-server instances via SSH
@@ -161,7 +157,7 @@ Note: All syslog-auto entries route directly to GPUs with `api_key: not-needed`.
 6. Verify GPU monitor server is running on pi (:9100)
 7. Verify watchdog is running on pi
 8. Restart router if roster not loaded (check logs for STARTUP ROSTER)
-9. Reload roster via `POST :9000/admin/roster/reload` if available
+9. Router roster reload — REMOVED 2026-09-11 (router decommissioned; LiteLLM fallbacks handle routing)
 
 ### sync-keys
 1. List all agent keys in LiteLLM DB via `GET /key/list`
@@ -258,7 +254,7 @@ If no SSH access, send Zulip DM via abiba-bot with vault update instructions.
 Benchmarks from 2026-07-17. Strix Halo model: qwen3.6-35B-udq4. RTX 5070 MTP provides 2.7x speedup over pre-upgrade 70 tok/s.
 All 3 GPUs now at 128K context (2026-07-17, reduced from 256K for stability).
 
-Benchmarks run through LiteLLM proxy (192.168.68.116:4001) every 5 minutes.
+Benchmarks run through LiteLLM proxy (192.168.68.116:4000) every 5 minutes.
 Degradation alerts fire at 30% (warning) and 50% (critical) below baseline.
 History stored at `/root/data/toks-history.json` with 7-day rolling window.
 

gpu-monitor.prose.md

@@ -2,7 +2,7 @@
 kind: responsibility
 name: gpu-monitor
 description: >
-  Comprehensive GPU fleet monitor — polls every subsystem (sidecars, router,
+  Comprehensive GPU fleet monitor — polls every subsystem (sidecars,
   LiteLLM, Strix Halo, dashboard) every 15s, renders a live HTML dashboard,
   checks alert thresholds, and exposes a JSON API for downstream consumers.
 agent: abiba
@@ -31,23 +31,34 @@ agent: abiba
 └──────┘ │qwen27B│ │LiteLLM │
          └──────┘ │dashboard│
                   └────────┘
+```
 
 Note: JSON sidecar exporters at :8090 were never deployed on any
 GPU host. Router falls back to GPU /health direct probe. Monitor
 should use router /health/unified as source of truth for GPU status.
 Strix Halo :8080 is firewalled to .116 only — monitor on .24 cannot
 poll .15:8080 directly; must go through router on .116.
-```
+
+**PORT RULE (verified 2026-09-10):** GPU per-host health lives on **:8080**
+(`http://<gpu-host>:8080/health`); Prometheus GPU exporters live on **:9400**.
+There is NO listener on bare port 80 for any GPU host — `http://192.168.68.8/health`
+and `http://192.168.68.110/health` answer `000`. Never use a bare-port-80 probe
+as a GPU liveness signal: on 2026-09-09 that produced three false
+`DEGRADED — GPU-rtx3090 000, GPU-rtx5070 000` rounds while
+`http://192.168.68.8:8080/health` and `http://192.168.68.110:8080/health`
+answered `200`. Port 80 is valid only on the harness host (.116), never on a GPU host.
 
 ### Subsystems Polled
 
 | Subsystem | Endpoint | Frequency | Metrics |
 |-----------|----------|-----------|---------|
-| GPU Status (all, via router) | `http://192.168.68.116/health/unified` | 15s | models, CB, scores, GPU status (router probes each GPU /health directly) |
-| Router (unified) | `http://192.168.68.116/health/unified` | 15s | models, CB, scores, GPU status |
-| Router (basic) | `http://192.168.68.116/health` | 15s | basic aliveness |
+| GPU Status (all, via fleet API) | `http://192.168.68.116/gpu/gpu-data` | 15s | models, CB, scores, GPU status from gpu-monitor on .24:9100 |
+| GPU .8 (RTX 3090) health | `http://192.168.68.8:8080/health` | 15s | direct liveness fallback — **:8080 ONLY, never bare port 80** |
+| GPU .110 (RTX 5070) health | `http://192.168.68.110:8080/health` | 15s | direct liveness fallback — **:8080 ONLY, never bare port 80** |
+| Fleet (unified) | `http://192.168.68.116/health/unified` | 15s | nginx `301` → `/gpu/gpu-data` served by gpu-monitor = alive (router decommissioned 2026-09-11) |
+| Harness (basic) | `http://192.168.68.116/health` | 15s | nginx → LiteLLM `/health/liveliness` |
 | LiteLLM | `http://192.168.68.116/litellm/health` | 15s | proxy health, model count |
-| Strix Halo | `http://192.168.68.116/health/unified` (router) | 15s | Strix Halo status via router — cannot poll .15:8080 directly (firewalled to .116 only) |
+| Strix Halo | `http://192.168.68.116/health/unified` (nginx → fleet API) | 15s | Strix Halo status via gpu-monitor — cannot poll .15:8080 directly (firewalled to .116 only) |
 | Dashboard | `http://192.168.68.116/dashboard/` | 15s | harness-dashboard aliveness |
 
 ### Alert Delivery
@@ -61,12 +72,28 @@ This replaces the previous DM-only delivery. All agents on the mesh can see and
 
 ## Alert Thresholds
 
+### Liveness rule (scoped)
+
+The any-HTTP-response rule applies ONLY to redirect/auth-gated liveness
+endpoints, where any HTTP answer proves a listener is up. Applied here: nginx's
+`/health/unified` answers `301 Moved Permanently` → `/gpu/gpu-data`
+(the same payload) and LiteLLM's `/litellm/health` answers `301` →
+`/litellm/health/liveliness`. For those endpoints a probe is **ALIVE** on
+**ANY** HTTP status — `3xx` redirects and `401`/`403` auth challenges included —
+and **DOWN = connection refused (`000`) or timeout only**. Same scoped rule as
+zulip-health (Tanko) and infrastructure-monitoring.
+
+Probes whose success condition is specifically a bare `200` are NOT covered by
+the any-HTTP rule. On those — the GPU `:8080/health` endpoints, nginx `/health`,
+and the dashboard — an unexpected status (`401`/`403`, `5xx`, or
+anything other than the expected `200`) is an **ALERT**, not "alive".
+
 | Metric | Warning | Critical |
 |--------|---------|----------|
 | GPU Temp | >80°C | >90°C |
 | VRAM Usage | >90% | >95% |
 | GPU Util | >95% | >98% |
-| Sidecar Unreachable | — | info (sidecars not deployed — use router /health/unified) |
+| Sidecar Unreachable | — | info (sidecars not deployed — use gpu-monitor /gpu-data) |
 | Model Down | — | critical (circuit breaker open) |
 
 ### JSON API Response Schema (/gpu-data)
@@ -101,24 +128,43 @@ This replaces the previous DM-only delivery. All agents on the mesh can see and
 **RUN LIVE, NEVER ECHO — every dispatch must execute the probes below with real tool calls; never repeat a prior report unless a live probe fails.**
 
 ```bash
+# Provenance — run first; paste the absolute path into the report
+pwd -P
+
 # GPU Monitor health
  curl http://localhost:9100/health | jq
 # Expected: 200 with {"status": "healthy", "cache_age_seconds": <n>}
 
-# Router health (via nginx on port 80)
+# GPU host health — DIRECT on :8080. NEVER probe bare port 80 on a GPU host:
+# http://192.168.68.8/health has no listener and returns 000 → false DEGRADED.
+curl -s -o /dev/null -w '%{http_code}' http://192.168.68.8:8080/health
+# Expected: 200 (bare-200 probe: any other status is an alert; 000/timeout = DOWN)
+curl -s -o /dev/null -w '%{http_code}' http://192.168.68.110:8080/health
+# Expected: 200 (bare-200 probe: any other status is an alert; 000/timeout = DOWN)
+
+# Router unified health (source of truth; 301 → /gpu/gpu-data is HEALTHY)
+curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116/health/unified
+# Expected: 301 (or 200 after following the redirect) — any HTTP status = alive
+
+# Router basic health (via nginx on port 80 — router .116 only, never a GPU host)
 curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116/health
-# Expected: 200 (Router is up and responding)
+# Expected: 200 (bare-200 probe: any other status is an alert; 000/timeout = DOWN)
 
 # LiteLLM health (via nginx on port 80)
 curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116/litellm/health
-# Expected: 200 (LiteLLM is up and responding)
+# Expected: 301 → /litellm/health/liveliness (200 after redirect) — any HTTP status = alive
 
 # Dashboard
  curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116/dashboard/
-# Expected: 200 (Dashboard is up and responding)
+# Expected: 200 (bare-200 probe: any other status is an alert; 000/timeout = DOWN)
 ```
 
-**Report format**: Summarize actual results from each probe. If any probe returns non-200, flag as alert.
+**Report format**: Begin every report with the **absolute path the probe executed
+from** (`pwd -P`, or the monitor script's absolute path) so a stale-consumer
+report is distinguishable from a real fault at read time. Summarize actual
+results from each probe. Apply the scoped liveness rule above: on auth-gated
+endpoints only connection-refused (`000`) or timeout is DOWN; on bare-200 probes
+any other status is an alert. Never probe a GPU host on bare port 80.
 
 ### view-dashboard
 Open `http://localhost:9100/` in browser — Live HTML dashboard
@@ -128,12 +174,14 @@ Open `http://localhost:9100/` in browser — Live HTML dashboard
 pkill -f gpu-monitor-server.py
 python3 /root/scripts/gpu-monitor-server.py &
 ```
-Or via PM2: `pm2 restart gpu-monitor`
+Managed by systemd (verified 2026-09-11): `systemctl restart gpu-monitor`
 
-### check-router
-The router health is accessed through nginx on port 80 (NOT port 9000 directly).
-`curl http://192.168.68.116/health/unified` — Router unified health via nginx proxy
-`curl http://192.168.68.116:9000/health/unified` — ❌ WILL FAIL (port bound to 127.0.0.1 only)
+### check-fleet
+Fleet health is accessed through nginx on port 80 on the harness host
+(.116) — NOT port 9000 (router decommissioned 2026-09-11), and NOT bare
+port 80 on a GPU host.
+`curl http://192.168.68.116/health/unified` — nginx answers `301` → `/gpu/gpu-data` (fleet monitor payload) = alive
+`curl http://192.168.68.8/health` — ❌ NEVER USE (GPU host, no port-80 listener → false `000`/DEGRADED)
 
 ## Configuration Files
 
@@ -145,13 +193,18 @@ The router health is accessed through nginx on port 80 (NOT port 9000 directly).
 
 ## Execution
 
-1. **Poll router** (every 15s): GET .116/health/unified — single source of truth for all GPU status (router probes each GPU /health directly via sidecar fallback)
-2. **Poll router** (every 15s): GET .116/health via nginx:80
-3. **Poll LiteLLM** (every 15s): GET .116/litellm/health via nginx:80
-4. **Poll Strix** (every 15s): via router /health/unified (cannot poll .15:8080 directly — firewalled to .116 only)
-5. **Poll dashboard** (every 15s): GET .116/dashboard/
-6. **Check alerts**: Compare metrics against thresholds
-7. **Compute summary**: Fleet-wide health aggregation
-8. **Render dashboard**: Generate HTML at /root/dashboard/gpu-fleet.html
-9. **Serve API**: HTTP server on port 9100
-10. **Repeat** every 15 seconds
+**Port discipline:** probe GPU hosts on `:8080` (or the router's
+`/health/unified`); probe port 80 only on the router (.116). Never bare port 80
+on a GPU host.
+
+1. **Poll router** (every 15s): GET .116/health/unified — single source of truth for all GPU status (router probes each GPU /health directly via sidecar fallback). `301` → `/gpu/gpu-data` counts as alive.
+2. **Fallback direct GPU probe** (only if router /health/unified is DOWN): GET `http://192.168.68.8:8080/health` and `http://192.168.68.110:8080/health` — **:8080 only, never bare port 80**.
+3. **Poll router** (every 15s): GET .116/health via nginx:80
+4. **Poll LiteLLM** (every 15s): GET .116/litellm/health via nginx:80
+5. **Poll Strix** (every 15s): via router /health/unified (cannot poll .15:8080 directly — firewalled to .116 only)
+6. **Poll dashboard** (every 15s): GET .116/dashboard/
+7. **Check alerts**: Compare metrics against thresholds
+8. **Compute summary**: Fleet-wide health aggregation
+9. **Render dashboard**: Generate HTML at /root/dashboard/gpu-fleet.html
+10. **Serve API**: HTTP server on port 9100
+11. **Repeat** every 15 seconds

gpu-self-heal.prose.md

@@ -9,7 +9,7 @@ description: >
   (v2.1.0) with active remediation rules, Prometheus metrics consumption,
   VRAM trend analysis, and predictive alerting.
   UPDATED 2026-07-18: Model assignments synced to 2026-07-17 swaps.
-  Router (port 9000) references replaced with direct GPU routing.
+  Router (port 9000) DECOMMISSIONED 2026-09-11; references replaced with direct GPU routing.
   Benchmark baselines refreshed to live values.
   Prometheus exporters removed — not deployed; fall back to direct sidecar probes.
   Stable role-based aliases (strix-moe, gpu-dense, gpu-light) from gpu-fleet.
@@ -51,7 +51,7 @@ depends_on:
 | `strix-moe` | Strix Halo 64GB | ct15 (.15:8080) | qwen3.6-35B-udq4 | ~10/64GB (16%) | 128K | 62.9 | Compression, summarization, long docs |
 
 Key notes:
-- All models use direct GPU routing via LiteLLM (`api_key: not-needed`). Router (port 9000) is deprecated and NOT in the inference path.
+- All models use direct GPU routing via LiteLLM (`api_key: not-needed`). Router (port 9000) was decommissioned 2026-09-11 and is NOT in the inference path.
 - Stable aliases (gpu-dense, gpu-light, strix-moe) from gpu-fleet are the canonical names for agent configs. Model-specific names still work but are deprecated.
 - RTX 5070 tok/s is ~145 for Qwen3.5-9B — gpu-light is the fastest endpoint. Route vision/web/light work there first. NOTE: Qwen3.5-9B is multimodal (image+text), NOT text-only like gemma-4-12b was.
 - Strix Halo is 62.9 tok/s (89% of 70.5 baseline) — below optimal but stable. Check for competing workloads.
@@ -104,10 +104,10 @@ Key notes:
 
 ### Rule 5: Circuit Breaker Stuck Open
 - **Detect**: Circuit breaker open >10 minutes with GPU reporting healthy
-- **Note**: Router (port 9000) is deprecated. If circuit breakers are reported by gpu-monitor, they come from LiteLLM's internal tracking, not the old router.
+- **Note**: Router (port 9000) was decommissioned 2026-09-11. If circuit breakers are reported by gpu-monitor, they come from LiteLLM's internal tracking, not the old router.
 - **Fix**: 
   1. Verify GPU /health returns 200 on direct port (:8080)
-  2. If GPU healthy, alert but do NOT reset via router API (deprecated)
+  2. If GPU healthy, alert but do NOT reset via router API (decommissioned 2026-09-11)
   3. Check LiteLLM health directly: http://192.168.68.116/litellm/health/liveliness
   4. Restart LiteLLM container on CT 116 if circuit breakers are stuck
 - **Verify**: LiteLLM returns healthy, circuit breaker clears within 60s
@@ -276,7 +276,7 @@ Pushed to `SyslogSolution/health-logs/gpu/{run_id}.json` — versioned, searchab
 2. **Model restart**: ✅ Only if >50% failure rate over 60s + 30s grace period. Not on single stuck request.
 3. **Strix direct access**: ✅ Open firewall .15:8080 → .24 for direct health probe + restart.
 4. **VRAM thresholds**: Tiered — **300MB/h** (RTX 3090), **300MB/h** (RTX 5070), 200MB/h (Strix). Previous values (100/50) were too sensitive; raised 2026-07-18 based on operational data.
-5. **CB auto-reset**: ✅ Router deprecated — circuit breakers go through LiteLLM health check + container restart if needed. No per-GPU auto-reset.
+5. **CB auto-reset**: ✅ Router decommissioned 2026-09-11 — circuit breakers go through LiteLLM health check + container restart if needed. No per-GPU auto-reset.
 6. **Benchmark baseline**: Rolling 30-day average, recalculated weekly. Current baselines live in gpu-monitor.
 7. **Predictive alerts**: Two-tier — warn at >70°C+rising (>2°C/min), critical at >80°C+rising.
 8. **Prometheus**: ❌ Not deployed. Use direct sidecar probes (:8080/health) and gpu-monitor API. Prometheus integration deferred until exporters are running on GPU hosts.

hermes-agent-baseline.prose.md

@@ -39,7 +39,7 @@ runtime via `infisical run --` wrapper. Plaintext keys removed from this baselin
 ```
 Infisical vault → infisical run -- hermes gateway → LITELLM_API_KEY (runtime)
                        ↓
-Agent (systemd) → LITELLM_API_KEY → LiteLLM (:116/v1) → Router (:9000) → GPU (llama-server)
+Agent (systemd) → LITELLM_API_KEY → LiteLLM (:116/v1) → GPU (llama-server)
                                      └── Key DB (Postgres)
 ```
 

infrastructure-control.prose.md

@@ -199,18 +199,18 @@ description: >
 
 ### Ecosystem B: CT 116 syslog-api (192.168.68.116)
 
-8 containers in inference-harness stack:
+12 containers on CT 116 — 11 in the inference-harness stack + trove-agent-docker (verified live 2026-09-11; LiteLLM upgraded 1.90.0-rc.1 -> 1.99.1; trove-agent-docker added 2026-09-11):
 
 | Container | Image | Port | Role |
 |-----------|-------|------|------|
-| harness-litellm | berriai/litellm:1.90.0-rc.1 | :4000→:4001 | API proxy, key mgmt, fallbacks |
-| harness-router | inference-harness-router | :9000 (127.0.0.1) | GPU routing, slot booking, CB |
+| harness-litellm | ghcr.io/docker.litellm.ai/berriai/litellm:1.99.1 | :4000→:4000 | API proxy, key mgmt, fallbacks |
 | harness-nginx | nginx:alpine | :80 | Entrypoint, /v1→LiteLLM, /dashboard/ |
 | harness-postgres | postgres:16-alpine | :5432 | LiteLLM DB (keys, spend, config) |
-| harness-redis | redis:7-alpine | :6379 | Router slots, circuit breakers |
+| harness-redis | redis:7-alpine | :6379 | LiteLLM cache + rate-limit state |
 | harness-dashboard | inference-harness-dashboard | :3000 | SyslogAI Harness UI |
 | harness-grafana | grafana/grafana | :3000→:3001 (direct LAN, not behind nginx) | GPU + Proxmox + Docker dashboards |
 | harness-prometheus | prom/prometheus | :9090 | Metrics scraper, 6 jobs |
+| trove-agent-docker | ghcr.io/techdox/trove-agent-docker:latest | outbound agent (no port) | Trove host agent — service inventory + metrics, added 2026-09-11 |
 
 **Nginx routing**:
 - `/v1/*` → harness-litellm:4000 (API)
@@ -224,7 +224,6 @@ description: >
 - 192.168.68.8:9400 (RTX 3090 — qwen)
 - 192.168.68.110:9400 (RTX 5070 — gemma)
 - 192.168.68.15:9400 (Strix Halo — qwen3.6-35B-udq4)
-- 192.168.68.24:9401 (Router metrics exporter)
 - harness-litellm:4000 (LiteLLM health)
 
 ### Ecosystem C: Netbird (72.61.0.17 — Hostinger srv1079750.hstgr.cloud)
@@ -588,9 +587,6 @@ curl -s -H "Authorization: Bearer $(infisical secrets get LITELLM_MASTER_KEY --p
 # Storage check
 ssh root@192.168.68.7 "df -h /media/storage /media/mediastore"
 
-# Router roster reload (if needed)
-curl -s -X POST http://192.168.68.116:9000/admin/roster/reload \
-  -H "Authorization: Bearer sk-admin-ee09fffd04978b61a1569ac670c68814"
 
 # Restart stuck GPU (saturation watchdog alternative)
 ssh root@192.168.68.8 "systemctl restart llama-server"

infrastructure-monitoring.prose.md

@@ -102,11 +102,32 @@ GPU .8 (RTX 3090)    GPU .110 (RTX 5070)   GPU .15 (Strix Halo)
 - Stack persists across reboots (systemd for exporters, Docker restart policy)
 
 ## Execution
+
+### Liveness rule (scoped)
+
+The any-HTTP-response rule applies ONLY to unauthenticated/auth-gated endpoints,
+where any HTTP answer proves a listener is up: the PVE API
+(`https://<node>:8006/api2/json/version`) and LiteLLM health
+(`/litellm/health`, `301` → `/litellm/health/liveliness`). For those endpoints a
+probe is **ALIVE** on **ANY** HTTP status — `401`/`403` auth challenges and `3xx`
+redirects included — and **DOWN = connection refused (`000`) or timeout only**.
+The PVE API legitimately answers `401` to an unauthenticated probe — that is the
+healthy signal, not a failure. Same scoped rule as zulip-health (Tanko) and
+gpu-monitor.
+
+Probes whose success condition is specifically a bare `200` are NOT covered by
+the any-HTTP rule. On those — the authenticated Zulip POST and the router
+`/health` — an unexpected status (`401`/`403` from a bad or missing credential,
+`5xx`, or anything other than the expected `200`) is an **ALERT**, not "alive".
+
 ### check-health
 
 **RUN LIVE, NEVER ECHO — every dispatch must execute the probes below with real tool calls; never repeat a prior report unless a live probe fails.**
 
 ```bash
+# Provenance — run first; paste the absolute path into the report
+pwd -P
+
 # Zulip API health (POST ping)
 source /etc/litellm-monitor.env
 ZULIP_USER="abiba-bot@chat.sysloggh.net"
@@ -128,11 +149,20 @@ curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116/health
 
 # LiteLLM health (via nginx on port 80)
 curl -s -o /dev/null -w '%{http_code}' http://192.168.68.116/litellm/health
-# Expected: 200 (LiteLLM is up and responding)
+# Expected: 301 → /litellm/health/liveliness (200 after redirect) — any HTTP status = alive
 
-# PVE API (401 expected for unauthenticated probe — API is up over https)
-curl -s -o /dev/null -w '%{http_code}' https://192.168.68.116:8006/api2/json
-# Expected: 401 (unauthorized — API is up; 000 = unreachable, 500 = API down)
+# PVE API liveness — probe the REAL PVE nodes on :8006, never the monitoring
+# host CT 116. CT 116 runs no pveproxy, so probing it on :8006 returns 000 —
+# that was the stale-vantage bug this replaces (CT 116 is the monitoring host,
+# not a cluster node). Unauthenticated GET answers 401 while the API is ALIVE
+# by design. Alive = ANY HTTP status (401 is the EXPECTED healthy response);
+# DOWN = connection refused (000) or timeout only.
+for node in 192.168.68.9 192.168.68.5 192.168.68.15 192.168.68.6 192.168.68.12; do
+  printf '%s:8006 -> %s\n' "$node" \
+    "$(curl -sk -o /dev/null -w '%{http_code}' --connect-timeout 5 "https://$node:8006/api2/json/version")"
+done
+# Expected: 401 on every node (acerpve .9, ocupve .5, amdpve .15, storepve .6, minipve .12)
+# A node answering 000/timeout is DOWN — flag that node. 401 is NOT a fault.
 
 # Prometheus targets
 curl -s http://192.168.68.116:9090/api/v1/targets | jq '.data.activeTargets'
@@ -143,11 +173,20 @@ curl -s http://192.168.68.116:3001/api/health | jq '{status, version}'
 # Expected: {"status":"ok","version":"..."}
 
 # LiteLLM metrics (Prometheus endpoint)
-curl -s http://192.168.68.116:4001/metrics | head -20
+curl -s http://192.168.68.116:4000/metrics | head -20
 # Expected: Prometheus-formatted metrics output
 ```
 
-**Report format**: Summarize actual results from each probe. If any probe returns non-200 or empty output, flag as alert.
+**Report format**: Begin every report with the **absolute path the probe executed
+from** (`pwd -P`, or the script's absolute path) so a stale-consumer report is
+distinguishable from a real fault at read time. Summarize actual results from
+each probe. Apply the any-HTTP-response liveness rule ONLY to the auth-gated PVE
+API and LiteLLM endpoints above: only connection-refused (`000`) or timeout is
+DOWN; empty output is a warning. For probes whose expected result is a bare `200`
+(the authenticated Zulip POST, router `/health`), flag an alert on any unexpected
+status (`401`/`403`/`5xx`) — do not summarize it as alive. A bare-`200`
+expectation on the auth-gated PVE API (`401`) or LiteLLM health (`301` redirect)
+is a stale expectation, not a fault.
 
 
 ### Phase 1: GPU Exporters
@@ -203,5 +242,5 @@ curl -s http://192.168.68.116:9090/api/v1/targets
 curl -s http://192.168.68.116:3001/api/health
 
 # LiteLLM metrics (already live)
-curl -s http://192.168.68.116:4001/metrics | head -20
+curl -s http://192.168.68.116:4000/metrics | head -20
 ```

infrastructure-update.prose.md

@@ -3,15 +3,16 @@ kind: responsibility
 name: infrastructure-update
 description: >
   Autonomous system-wide update contract covering all 5 Proxmox nodes,
-  15+ containers/VMs, and 4 Docker ecosystems. Updates apt packages,
+  15+ containers/VMs, and 5 Docker ecosystems (docker-vm .7, CT 116 .116,
+  CT 117, hwpve .11, NetBird VPS 72.61.0.17). Updates apt packages,
   Docker images, and container stacks in safe waves with health checks
   and automatic rollback on failure.
 agent: abiba
 triggers:
   - on "infra update" command
-  - weekly (Sunday 03:00 EDT) via cron
+  - weekly (Sunday 03:00 America/New_York) via Agent Zero scheduler task "weekly-fleet-docker-update" (qSOOVzsU) — implemented 2026-09-08
   - on security advisory relay from Mumuni
-version: 1.2.0
+version: 1.4.0
 ---
 
 ## Maintains
@@ -80,7 +81,14 @@ Before ANY update wave:
 | VM 109 (.7) | Home stack (Pulse, Stirling PDF) — JDownloader moved to CT 118 LXC 2026-08-01 | `cd /opt/home_stack && docker compose pull && docker compose up -d` |
 | VM 109 (.7) | Audiobookshelf | `cd /opt/audiobookshelf && docker compose pull && docker compose up -d` |
 | CT 116 (.116) | Inference Harness (LiteLLM, Prometheus, Grafana) | `cd /opt/inference-harness && docker compose pull && docker compose up -d` |
-| CT 117 (zulip, storepve) | Zulip | `docker pull zulip/docker-zulip:latest && docker restart zulip-zulip-1` |
+| CT 116 (.116, via minipve) | Trove docker agent (trove-agent-docker) | `pct exec 116 -- bash -c 'cd /opt/trove-agent && docker compose pull && docker compose up -d'` |
+| CT 117 (storepve) | Zulip | `pct exec 117 -- bash -c 'cd /opt/zulip && docker compose pull && docker compose up -d'` (from storepve; compose recreates on zulip_default network) |
+| CT 117 (storepve) | Jitsi | `pct exec 117 -- bash -c 'cd /opt/jitsi && docker compose pull && docker compose up -d'` (from storepve) |
+| hwpve (.11) | Authentik (server, worker, postgres) | `ssh root@192.168.68.11 'cd /root && docker compose pull && docker compose up -d'` |
+| NetBird VPS (72.61.0.17) | NetBird (server, dashboard, proxy, traefik, crowdsec) | `ssh root@72.61.0.17 'cd /root && docker compose pull && docker compose up -d'` |
+| VM 109 (.7) | Trove test | `cd /opt/trove-test && docker compose pull && docker compose up -d` |
+| VM 109 (.7) | docker-stats | `cd /opt/docker-stats && docker compose pull && docker compose up -d` |
+| CT 116 (.116) | Monitoring (Grafana, Prometheus, Alertmanager, PVE exporter) | `cd /opt/monitoring && docker compose pull && docker compose up -d` |
 
 **Verify after Wave 3:**
 - All containers healthy: `docker ps` on each host
@@ -88,8 +96,13 @@ Before ANY update wave:
 - MCP integration test: `curl localhost:4000/mcp-rest/tools/list -H "Authorization: Bearer $MASTER_KEY"` → 90 tools (23 RA-H OS + 67 GitHub)
 - Zulip test: send test message to #agent-hub
 - Dashboard loading: `curl localhost:3001/` (via CT 116)
-- Firecrawl test: `curl :3002/`
+- Firecrawl test: `curl -X POST http://192.168.68.7:3002/v1/search -H 'Content-Type: application/json' -d '{"query":"health","limit":1}'` → `"success":true` (GET `/` returns 200)
+- Authentik test: `curl http://192.168.68.11:9000/` → 302 redirect to login
+- NetBird test: `curl -s -o /dev/null -w '%{http_code}' https://netbird.sysloggh.net/` → 200
+- harness-litellm cold start: allow 3-5 min after recreate — reports unhealthy and :4000 refuses connections while loading config/DB, then recovers to 200 on its own (verified 2026-09-08)
 - SearXNG test: `curl :8888`
+- Digest-pin sweep: `grep -rn '@sha256:' /opt/*/docker-compose.y*` on every host — digest-pinned images are INVISIBLE to `docker compose pull` (the pin re-pulls the same digest forever, so new releases never appear). Flag every pin in the run report and propose un-pinning to a floating tag with user approval before editing. Found 2026-09-10: audiobookshelf was digest-pinned at 2.34.0 (container created 2026-07-18) and silently missed by every sweep; dockhand stack was also pinned (stack removed 2026-09-10, unused). After un-pinning audiobookshelf to :latest it updated to 2.36.0 and verified HTTP 200.
+- Version-pin awareness: a fixed version tag (e.g. `image: ...litellm:1.99.1`) is a no-op for `docker compose pull` just like a digest pin, so the stack silently stops advancing. CT 116 `harness-litellm` is INTENTIONALLY pinned to `1.99.1` (registry `main-stable`/`latest` currently resolve to `1.100.1`, sha256:a3715fa7 — a bleeding-edge jump explicitly declined 2026-09-11). Every run must look up the newest STABLE release tag for any version-pinned image, bump the pin deliberately with user approval, recreate, and re-verify. Never silently revert a pin to a floating tag.
 
 ## Wave 4: Proxmox Kernel Reboot
 
@@ -158,6 +171,8 @@ Before Wave 1, snapshot these files:
 /opt/search-stack/searxng/docker-compose.yml            (VM 109 .7)
 /opt/home_stack/docker-compose.yml                      (VM 109 .7)
 /opt/audiobookshelf/docker-compose.yml                  (VM 109 .7)
+/root/compose.yml                                       (hwpve .11 — Authentik server/worker/postgres)
+/root/docker-compose.yml                                (NetBird VPS — netbird server/dashboard/proxy, traefik, crowdsec)
 /root/.pi/agent/extensions/config.yaml                  (CT 100 .24)
 /etc/systemd/system/strix-server.service                (amdpve .15 — strix-moe)
 /etc/systemd/system/llama-server.service                (VM 101 .8, VM 103 .110)
@@ -193,7 +208,7 @@ mcp_servers:
 | Key | MCP Access |
 |-----|-----------|
 | Master key | ✅ Full — 90 tools (vault-injected) |
-| Agent keys (mumuni, tanko, etc.) | ❌ Per-key grants not supported in v1.90.0-rc.1 |
+| Agent keys (mumuni, tanko, etc.) | ❌ Per-key grants not supported in v1.99.1 |
 
 ### Known Limitations
 - Per-key MCP server grants not functional — only master key has access
@@ -220,7 +235,7 @@ When LiteLLM is upgraded to a version supporting per-key MCP grants:
 
 - [ ] All 5 PVE nodes updated, no reboot-loop
 - [ ] All VMs/CTs running post-update
-- [ ] All Docker containers healthy (VM 109 + CT 116 + CT 117)
+- [ ] All Docker containers healthy (VM 109 + CT 116 + CT 117 + hwpve .11 + NetBird VPS)
 - [ ] LiteLLM inference passing (syslog-auto test)
 - [ ] Zulip server + all 3 agents connected
 - [ ] GPU fleet at full capacity (3/3)

litellm-health.prose.md

@@ -12,8 +12,8 @@ note: >
 description: >
   Verifies the LiteLLM inference stack health. Current architecture (2026-07-09):
   nginx:80 → LiteLLM:4000 → GPU(llama-server) via direct proxy.
-  Router (harness-router :9000) is DEPRECATED — container still runs but
-  is not in the request path. GPU monitoring via Prometheus/Grafana and
+  Router (harness-router :9000) was DECOMMISSIONED 2026-09-11 (container,
+  image and config removed). GPU monitoring via Prometheus/Grafana and
   fleet dashboard (gpu-monitor :9100).
   Designed as a reusable contract for any Syslog agent.
   
@@ -42,8 +42,8 @@ Request → nginx:80 → LiteLLM:4000 → GPU(llama-server, parallel 2)
                         │
                     Grafana :3001
 
-  harness-router :9000 — DEPRECATED, container still runs but
-  NOT in request path. nginx routes /v1 → LiteLLM directly.
+  harness-router :9000 — DECOMMISSIONED 2026-09-11 (container, image
+  and config removed). nginx routes /v1 → LiteLLM directly.
   Router slot booking + circuit breakers replaced by
   LiteLLM native fallbacks + timeouts.
 ```
@@ -100,8 +100,7 @@ Request → nginx:80 → LiteLLM:4000 → GPU(llama-server, parallel 2)
 
 | Container | Image | Port | Health Check |
 |-----------|-------|------|-------------|
-| harness-litellm | berriai/litellm:1.90.0-rc.1 | :4000→:4001 | /health/liveliness |
-| harness-router | inference-harness-router | :9000 (127.0.0.1) | /health (DEPRECATED — not in path) |
+| harness-litellm | ghcr.io/docker.litellm.ai/berriai/litellm:1.99.1 | :4000→:4000 | /health/liveliness |
 | harness-nginx | nginx:alpine | :80 | HTTP 200 on /health |
 | harness-postgres | postgres:16-alpine | :5432 | pg_isready |
 | harness-redis | redis:7-alpine | :6379 | PING |
@@ -114,21 +113,23 @@ Request → nginx:80 → LiteLLM:4000 → GPU(llama-server, parallel 2)
 1. **Read parameters** — Use provided values or defaults
 
 2. **Check public endpoints**:
-   - GET {{public_url}}/ui/ → expect 200 ("LiteLLM Dashboard")
-   - GET {{public_url}}/docs → expect 200 ("LiteLLM API - Swagger UI")
+   - GET {{public_url}}/litellm/ui/ → expect 200 ("LiteLLM Dashboard")
+   - GET {{public_url}}/litellm/docs → expect 200 ("LiteLLM API - Swagger UI")
+   - GET {{public_url}}/ui/ and {{public_url}}/docs → expect 301 → /litellm/... → 200 (one-hop redirect helpers, added 2026-09-11)
 
 3. **Check LiteLLM health (no-auth)**:
    - GET http://{{backend_host}}/litellm/health/liveliness → expect 200
 
 4. **Check backend container health**:
-   - SSH to {{backend_host}} → `docker ps` → verify 8 containers healthy
-   - Critical: harness-litellm, harness-router, harness-nginx, harness-postgres
-   - Monitoring: harness-redis, harness-dashboard, harness-grafana, harness-prometheus
+   - SSH to {{backend_host}} → `docker ps` → verify 12 containers healthy (11 harness + trove-agent-docker, added 2026-09-11)
+   - Critical: harness-litellm, harness-nginx, harness-postgres
+   - Monitoring: harness-redis, harness-dashboard, harness-grafana, harness-prometheus,
+     harness-alertmanager, harness-zulip-bridge, harness-docker-stats, harness-pve-exporter,
+     trove-agent-docker (ghcr.io/techdox/trove-agent-docker, added 2026-09-11)
 
-5. **Check router roster loaded**:
-   - GET http://{{backend_host}}:9000/health → expect 200
-   - GET http://{{backend_host}}:9000/health/unified → expect 3 models
-   - If router returns "all GPUs saturated" but GPUs idle: roster not loaded → reload
+5. **Check GPU fleet health via gpu-monitor** (router decommissioned 2026-09-11):
+   - GET {{gpu_dashboard_url}}/gpu-data → expect 200 with GPU metrics JSON
+   - nginx `/health/unified` is now a `301` redirect to `/gpu/gpu-data` (same payload)
 
 6. **Check GPU fleet health** (via fleet dashboard):
    - GET {{gpu_dashboard_url}}/gpu-data → expect 200 with GPU metrics JSON

litellm-self-heal.prose.md

@@ -20,7 +20,7 @@ note: >
   Last verified: 2026-07-12
 description: >
   LiteLLM inference stack health monitoring + self-healing. Verifies the full
-  nginx → LiteLLM → GPU chain, 8 containers on CT 116, 3 GPU hosts, model
+  nginx → LiteLLM → GPU chain, 12 containers on CT 116, 3 GPU hosts, model
   inference, and agent keys. Applies remediation rules for common failures.
   Reports every action via Zulip DM and Gitea (SyslogSolution/health-logs).
 ---
@@ -41,8 +41,8 @@ Request → nginx:80 → LiteLLM:4000 → GPU(llama-server, parallel 2)
                         │
                     Grafana :3001
 
-  harness-router :9000 — DEPRECATED, container still runs but
-  NOT in request path. nginx routes /v1 → LiteLLM directly.
+  harness-router :9000 — DECOMMISSIONED 2026-09-11 (container, image
+  and config removed). nginx routes /v1 → LiteLLM directly.
   Router slot booking + circuit breakers replaced by
   LiteLLM native fallbacks + timeouts.
 ```
@@ -98,8 +98,7 @@ Preferred implementation: uncap shared pool, add capped alias for crew-only.
 
 | Container | Image | Port | Health Check |
 |-----------|-------|------|-------------|
-| harness-litellm | berriai/litellm:1.90.0-rc.1 | :4000→:4001 | /health/liveliness |
-| harness-router | inference-harness-router | :9000 (127.0.0.1) | /health (DEPRECATED — not in path) |
+| harness-litellm | ghcr.io/docker.litellm.ai/berriai/litellm:1.99.1 | :4000→:4000 | /health/liveliness |
 | harness-nginx | nginx:alpine | :80 | HTTP 200 on /health |
 | harness-postgres | postgres:16-alpine | :5432 | pg_isready |
 | harness-redis | redis:7-alpine | :6379 | PING |
@@ -113,7 +112,7 @@ Preferred implementation: uncap shared pool, add capped alias for crew-only.
 
 - **Health-check script** (`/opt/inference-harness/scripts/litellm-health-check.sh` on CT 116): `gpu-fleet` check fails only on **critical** alerts (warnings are informational). Tests `strix-moe` (not `ornith-1.0-35b`).
 - **GPU monitor** (`/root/scripts/gpu-monitor-server.py` on pi .24): runs as **systemd unit `gpu-monitor.service`** (was bare `&` process). `gpu_count` includes Strix Halo (was 2, now 3). VRAM alert thresholds: warning 93%, critical 97% (raised from 90/95 — 128K context steady-state is ~70% on RTX 3090, not a fault).
-- **Agent key monitor** (`/root/scripts/agent-health-check.py` on pi .24, cron `*/10`): v2 (2026-07-26) — reads each agent's **agent-specific** `{NAME}_LITELLM_API_KEY` from Infisical vault (not the shared master key). Covers: LiteLLM keys, GPU ports, agent gateways (all 5 agents now SSHa ble), CT liveness (pct status on PVE nodes), config.yaml YAML integrity, wrapper/CLI integrity, vault secret non-emptiness checks. Fleet roster: tanko (.122), mumuni (.24, inside abiba CT100), koby (.129), koonimo (.114), abiba (.24). Legacy `tdunna`/`baggy` replaced with canonical agent hostnames.
+- **Agent key monitor** (`/root/scripts/agent-health-check.py` on pi .24, cron `*/10`): v4 (2026-09-10) — vault-backed agents (tanko/koby/koonimo) read their **agent-specific** `{NAME}_LITELLM_API_KEY` from Infisical vault (not the shared master key); abiba (pi agent) reads `LITELLM_API_KEY` from its local `/root/.pi/agent/env.sh` (#735 — moved out of shared `/root/.bashrc`), not from the vault. Abiba is pi-only since the harness purge, so its Hermes config/wrapper/gateway legs are skipped rather than reported as faults; koby is **report-only** (captain's 2026-08-17 ruling) — its findings go to the `--json` `report_only` array and are never counted as fleet failures or repaired, and its CT 111 liveness is probed on storepve (.6). Covers: LiteLLM keys, GPU ports, agent gateways, CT liveness (pct status on PVE nodes), config.yaml YAML integrity, wrapper/CLI integrity, vault secret non-emptiness checks. Every run/report carries the absolute execution path (`script=` + `cwd=`). The current fleet roster is owned by the script changelog (`scripts/agent-health-check.py`); mumuni is no longer probed from this host. Legacy `tdunna`/`baggy` replaced with canonical agent hostnames.
 - **Stale keys cleaned**: `daily-infra-report.py` SYNTHETIC_API_KEY was stale (`sk-U_ydi3B` → 401); now reads `LITELLM_MASTER_KEY` from env. Deprecated scripts (`router-original.py`, `router-phase0-backup.py`, `apply-fixes.py`) still reference `sk-syslog-local-master-key` but do not actively poll LiteLLM.
 
 ## Maintains
@@ -139,17 +138,20 @@ Preferred implementation: uncap shared pool, add capped alias for crew-only.
 Run this first on every cycle. Results feed into remediation rules below.
 
 ### 1. Check public endpoints
-- GET {{public_url}}/ui/ → expect 200 ("LiteLLM Dashboard")
-- GET {{public_url}}/docs → expect 200 ("LiteLLM API - Swagger UI")
+- GET {{public_url}}/litellm/ui/ → expect 200 ("LiteLLM Dashboard")  # served directly by nginx
+- GET {{public_url}}/litellm/docs → expect 200 ("LiteLLM API - Swagger UI")  # served directly by nginx
+- GET {{public_url}}/ui/ and {{public_url}}/docs → expect 301 → /litellm/... → 200 (one-hop redirect helpers, added 2026-09-11)
 
 ### 2. Check LiteLLM health (no-auth)
 - GET http://{{backend_host}}/litellm/health/liveliness → expect 200
 
 ### 3. Check backend container health
-- SSH to {{backend_host}} → `docker ps` → verify 10 containers healthy
+- SSH to {{backend_host}} → `docker ps` → verify 12 containers healthy (11 harness + trove-agent-docker, added 2026-09-11)
 - Critical: harness-litellm, harness-nginx, harness-postgres
-- Monitoring: harness-redis, harness-dashboard, harness-grafana, harness-prometheus, harness-docker-stats, harness-pve-exporter
-- Deprecated but running: harness-router (not in path, reference only)
+- Monitoring: harness-redis, harness-dashboard, harness-grafana, harness-prometheus,
+  harness-alertmanager, harness-zulip-bridge, harness-docker-stats, harness-pve-exporter,
+  trove-agent-docker (ghcr.io/techdox/trove-agent-docker, added 2026-09-11)
+- Decommissioned 2026-09-11: harness-router (container, image and config removed)
 
 ### 4. Check GPU fleet health (via fleet dashboard)
 - GET {{gpu_dashboard_url}}/gpu-data → expect 200 with GPU metrics JSON
@@ -215,8 +217,9 @@ Fix → generate keys in LiteLLM via /key/generate → update /etc/environment o
 Escalate → if SSH access unavailable, send Zulip DM
 
 ### Rule 9: Stale Active Counter in Redis — DEPRECATED
-Router no longer in path so Redis active counters are unused. Rule retained
-for reference but inactive. If Redis issues occur, check harness-redis container.
+Router no longer in path so router active-slot counters are unused. Rule retained
+for reference but inactive. `harness-redis` now serves only LiteLLM cache and
+rate-limit state; check the container if cache errors appear.
 
 ---
 ---

memory-fixer.prose.md

@@ -6,7 +6,7 @@ name: memory-fixer
 description: >
   Auto-fix low-hanging fruit in the RA-H OS knowledge graph. No judgment calls — only deterministic Level 1 operations.
   Escalate anything that needs Kwame's input. Executes confirmed Kwame decisions to completion (state + updated_at).
-version: 2.0.0
+version: 2.1.0
 ---
 ---
 
@@ -69,13 +69,15 @@ FROM nodes
 WHERE json_extract(metadata, '$.namespace') IS NULL;
 ```
 
-### 3. Staleness Review Tagging
+### 3. Staleness Review Tagging (refresh-suggested nodes only)
 
 Using the type-based windows from the memory-monitor contract, tag nodes stale beyond their window. **Only process a maximum of 10 nodes per run** to avoid overwhelming Kwame. Prioritize infrastructure first, then dynamic, then ephemeral.
 
+**Archive-suggested nodes are NO LONGER tagged — they are archived outright (see Level 1 fix 4).** Tagging with `[REVIEW: refresh]` applies only to living nodes (infrastructure, deployment, system, system-health, business, philosophy, research, learning, investigation, analysis, project, agent, registry, policy).
+
 **Exclusion Rules:**
 - Nodes with `state` = `review_pending`, `deprecated`, `archived`, or `not_processed` are NOT processed
-- Nodes whose `description` already starts with `[REVIEW:` are NOT re-processed
+- Nodes whose `description` already starts with `[REVIEW:` or `[ARCHIVED]` are NOT re-processed
 
 ```sql
 SELECT id, title, json_extract(metadata, '$.type') as node_type,
@@ -104,9 +106,28 @@ LIMIT 10;
 
 For each identified node, call `updateNode(id, { description: "[REVIEW: action] " + originalDescription })`.
 
+### 4. Stale-Node Archiving (Level 1 — standing Kwame directive, 2026-09-11)
+
+**Kwame's standing directive: stale nodes CAN be archived by the fixer. No per-batch escalation, no `[REVIEW: archive]` tagging — archive them.**
+
+For every node whose suggested action is `archive` (i.e. its type is NOT one of the living types in fix 3), archive it in a **single** `updateNode` call:
+
+```python
+updateNode(id, {
+  "description": "[ARCHIVED] " + originalDescriptionWithoutReviewTag,
+  "metadata": {"state": "archived"}
+})
+```
+
+- `state` transitions **DO work through `updateNode`** (`archived`, and back to `active`). The former "state only accepts processed/not_processed, use SSH" claim was wrong — verified 2026-09-11 by archiving 7 nodes (#61, #373, #388, #465, #475, #526, #1476) over the bridge with `updated_at` auto-bumping. **SSH to the bridge host is a fallback, not a requirement**, and it is blocked from kagentz anyway.
+- Pass `description` and `metadata` in the **same** call, and always keep the `updates` object nested: `{"id": N, "updates": {…}}`.
+- Archiving is non-destructive: the node stays in the graph, marked `state: archived` + `[ARCHIVED] ` prefix. **Living nodes (refresh-suggested) are NEVER archived** without a specific Kwame decision — they are the cluster/agent/business canon.
+
+**Archive candidates are identified by the fix 3 query's `suggested_action = 'archive'` branch** (the `ELSE 'archive'` case: anything not an infrastructure/skill/documentation/strategic/audit type).
+
 ## Level 2 Escalations (Kwame Decision Required)
 
-1. **Stale nodes** flagged with `[REVIEW: …]` — Archive, refresh, or keep?
+1. **Refresh-suggested stale nodes** flagged with `[REVIEW: refresh]` — refresh or keep? (Archive-suggested nodes are auto-archived under fix 4 and are not escalated.)
 2. **Duplicate Nodes** (same title or >70% title overlap) — Merge or keep?
 3. **Orphan Nodes >90 days old** — Archive or connect?
 
@@ -144,7 +165,7 @@ Reply with:
 
 The fixer reads Kwame's previous response and **executes the decision to completion** — it must not leave a node in review-pending forever. Tagging alone is NOT enough; each confirmed decision must also update `state` and `updated_at` so the node drops out of the stale window on the next run.
 
-> ⚠️ `updateNode` cannot set `state` to non-standard values (restricted to `processed`/`not_processed`) and cannot add metadata keys. For state transitions and `updated_at` bumps, use **direct SSH + SQLite** on the bridge host:
+> ⚠️ **Corrected 2026-09-11:** `updateNode` DOES accept `state` changes — `{"updates": {"description": …, "metadata": {"state": "archived"}}}` works over the bridge, and `updated_at` bumps automatically. The old "use direct SSH + SQLite for state transitions" instruction was based on a wrong assumption; SSH is a fallback only (and is blocked from kagentz). Use one `updateNode` call for both the tag and the state.
 > ```bash
 > ssh root@192.168.68.65 "sqlite3 /root/.local/share/RA-H/db/rah.sqlite \"UPDATE nodes SET metadata = json_set(metadata, '$.state', '<state>'), updated_at = datetime('now') WHERE id = <id>;\""
 > ```
@@ -172,8 +193,9 @@ The result must be 0 rows when all decisions are executed. Report what was done.
 ## Checks
 
 - **State integrity:** archived nodes have `state: archived` + `[ARCHIVED]` prefix; kept nodes are `state: active` without a `[REVIEW:]` tag.
+- **Auto-archive applied:** no node should ever be left tagged `[REVIEW: archive]` — that tag is retired. Any `[REVIEW: archive]` found means fix 4 was skipped; archive it and report.
 - **No review-pending forever:** after executing Kwame's decisions, `[REVIEW:%` node count must be 0.
-- **Timestamps:** every executed decision bumps `updated_at`, so the node exits the stale window on the next run.
+- **Timestamps:** every executed decision (and every auto-archive) bumps `updated_at`, so the node exits the stale window on the next run.
 
 ## Logging
 Every Level 1 fix logged to `~/.hermes/logs/memory-fixer/YYYY-MM-DD.md`

proxmox-monitor.prose.md

@@ -122,7 +122,10 @@ ssh root@192.168.68.116 "curl -s -o /dev/null -w '%{http_code}' http://127.0.0.1
 # Expected: 200 (pve-exporter is up and responding)
 ```
 
-**Report format**: Summarize actual results from each probe. If any probe returns non-200, flag as alert.
+**Report format**: Begin every report with the **absolute path the probe executed
+from** (`pwd -P`, or the script's absolute path) so a stale-consumer report is
+distinguishable from a real fault at read time. Summarize actual results from
+each probe. If any probe returns non-200, flag as alert.
 
 **Note**: Docker Stats and PVE Exporter are bound to 127.0.0.1 (localhost-only) so they must be probed from .116 via SSH. Prometheus and Grafana are bound to 0.0.0.0 so they can be probed from the LAN.
 

scripts/agent-health-check.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-/root/scripts/agent-health-check.py — Consolidated Agent Health Verification v2
+/root/scripts/agent-health-check.py — Consolidated Agent Health Verification v4
 
 Verifies: LiteLLM keys (agent-specific), GPU port conflicts, agent Zulip streaming,
 gateway liveness, gateway log health, CT liveness, config YAML integrity,
@@ -17,11 +17,42 @@ Changelog:
   v2 (2026-07-26): Added CT liveness, config validation, wrapper integrity,
     vault secret emptiness check. Fixed Koby/Koonimo SSH hosts and agent key
     name format ({NAME}_LITELLM_API_KEY not LITELLM_API_KEY_{NAME}).
-    Fleet roster: tanko (.122), mumuni (.24, inside abiba CT100), koby (.129), koonimo (.114),
-    abiba (.24).
+    Fleet roster: tanko (.122), koby (.129), koonimo (.114), abiba (.24).
+    (v2 also carried a mumuni probe; see v5 — mumuni is no longer probed: she
+    moved to her own container, kagentz CT 105 / .14, and is monitored there.)
+  v3 (2026-09-08): GPU unit repoint verified live (.8 llama-chat-api.service,
+    .110 llama-server.service, .15 strix-server.service) — .8 was probing a stale
+    llama-server unit that reads inactive, producing false UNREACHABLE legs.
+    systemctl is-active no longer swallows non-zero exit as SSH failure.
+    Fixed UnboundLocalError on the abiba/koonimo gateway leg (pid unbound in the
+    summary f-string). Abiba's LiteLLM key now comes from /root/.pi/agent/env.sh
+    (#735 agent separation; creds moved out of shared /root/.bashrc).
+  v4 (2026-09-10): probe-drift round 2 (prose-contracts follow-up to #65/#66/#68).
+    abiba declared pi-only runtime — Hermes-era config/wrapper/gateway checks are
+    skipped (harness purge). koby declared report_only per the captain's
+    2026-08-17 ruling: every koby leg is detected and reported, never counted as a
+    fleet failure and never repaired. koby's PVE mapping corrected to storepve
+    (CT 111 tdunna lives on .6 — the old amdpve mapping produced a false
+    ct-unreachable). The wrapper infisical-path check had two stale-expectation
+    bugs: it read only the first 20 lines of the wrapper, so koonimo (whose
+    wrapper does reference /usr/bin/infisical, just past line 20) was falsely
+    FAILed as "path may be wrong"; and it treated the absence of any infisical
+    reference as a fault, though koby's wrapper sources the key from
+    ~/.hermes/.env and never invokes infisical. The check now reads the full
+    wrapper body, accepts a no-infisical wrapper, and verifies that any absolute
+    infisical path the wrapper references actually exists. Report-only findings
+    are surfaced in a machine-readable `report_only` array in --json output,
+    separate from `failures`. Every run prints absolute execution provenance
+    (script + cwd) in the header, in the cron ALERT line, and in --json output so
+    a stale-consumer report is distinguishable from a fault at read time.
+  v5 (2026-09-10): roster correction only, no behavior change. mumuni was removed
+    from the AGENTS dict when she moved off this host onto her own container
+    (kagentz CT 105 on minipve, .14, dedicated `hermes` user) and is monitored
+    from her side. This script must not probe mumuni or .24 — the v2 changelog
+    roster line was the last reference still placing her at .24 / CT100.
 """
 
-import subprocess, json, sys, os, time
+import subprocess, json, sys, os, time, re, io, contextlib
 from datetime import datetime
 
 LITELLM = "http://192.168.68.116:80"
@@ -40,18 +71,55 @@ PVE_NODES = {
 # Agent definitions: ct, host, user, pve_node, vault_key_name
 AGENTS = {
     "tanko":   {"ct": 112, "host": "192.168.68.122", "user": "jerome", "pve": "amdpve",  "vault_key": "TANKO_LITELLM_API_KEY", "runtime": "dsh"},
-    "abiba":   {"ct": 100, "host": "192.168.68.24",  "user": "root",   "pve": "minipve",  "vault_key": None},  # Pi agent + Mumuni Zulip, no vault key
-    "koby":    {"ct": 111, "host": "192.168.68.129", "user": "root",   "pve": "amdpve",  "vault_key": "KOBY_LITELLM_API_KEY"},
+    # abiba = pi agent (.24) — no vault key; its LiteLLM key is read from its
+    # local env file (key_env below), not from the shared vault or .bashrc.
+    # runtime=pi: abiba has run pi-only since the harness purge. There is no
+    # Hermes gateway, no ~/.hermes/config.yaml and no hermes CLI wrapper on .24
+    # (the /root/.local/bin/hermes symlink is dangling), so the Hermes-era
+    # config/wrapper/gateway legs are skipped rather than reported as faults.
+    "abiba":   {"ct": 100, "host": "192.168.68.24", "user": "root", "pve": "minipve",
+               "vault_key": None, "runtime": "pi",
+               "key_env": {"file": "/root/.pi/agent/env.sh", "var": "LITELLM_API_KEY"}},
+    # koby = report-only (captain's 2026-08-17 ruling, Rule 17): detect and
+    # report, NEVER repair, and never count against fleet failures. CT 111
+    # (tdunna) lives on storepve (.6) — verified live 2026-09-10; the previous
+    # amdpve mapping made `pct status 111` fail and read as ct-unreachable.
+    "koby":    {"ct": 111, "host": "192.168.68.129", "user": "root",   "pve": "storepve", "vault_key": "KOBY_LITELLM_API_KEY", "report_only": True},
     "koonimo": {"ct": 113, "host": "192.168.68.114", "user": "root",   "pve": "amdpve",  "vault_key": "KOONIMO_LITELLM_API_KEY"},
 }
 
+# Systemd units verified live 2026-09-08 (systemctl list-units on each host):
+#   .8   rtx3090 (gpu-dense)  -> llama-chat-api.service  (active; the old
+#        llama-server.service unit file is stale/inactive — probing it read as
+#        UNREACHABLE for a healthy process)
+#   .110 rtx5070 (ocu-llm VM) -> llama-server.service    (active)
+#   .15  strixhalo (amdpve)   -> strix-server.service    (active)
 GPU_HOSTS = {
-    "gpu-rtx3090 (.8)":     {"host": "192.168.68.8",   "port": 8080, "service": "llama-server"},
-    "gpu-rtx5070 (.110)":   {"host": "192.168.68.110", "port": 8080, "service": "llama-server"},
-    "gpu-strixhalo (.15)":  {"host": "192.168.68.15",  "port": 8080, "service": "strix-server"},
+    "gpu-rtx3090 (.8)":     {"host": "192.168.68.8",   "port": 8080, "service": "llama-chat-api.service"},
+    "gpu-rtx5070 (.110)":   {"host": "192.168.68.110", "port": 8080, "service": "llama-server.service"},
+    "gpu-strixhalo (.15)":  {"host": "192.168.68.15",  "port": 8080, "service": "strix-server.service"},
 }
 
 FAIL = []
+REPORT_ONLY = []
+
+
+def _fail(key, agent_name=None):
+    """Record a failure, except for report-only agents.
+
+    Koby is report-only per the captain's 2026-08-17 ruling (Rule 17): its legs
+    are detected and reported, never repaired and never counted as fleet
+    failures. A red fleet alert on a known report-only leg is a false alarm.
+    Report-only findings are tracked separately so --json consumers can still
+    see them without them counting as fleet failures. Any non-report-only agent
+    (or a leg with no agent, e.g. GPU hosts) records normally.
+    """
+    if agent_name and AGENTS.get(agent_name, {}).get("report_only"):
+        REPORT_ONLY.append(key)
+        print(f"  🔍 report-only ({agent_name}): {key} — reported, not counted/repaired")
+        return
+    FAIL.append(key)
+
 
 INFISICAL_TOKEN = os.environ.get("INFISICAL_TOKEN")
 INFISICAL_API_URL = os.environ.get("INFISICAL_API_URL", "https://vault.sysloggh.net")
@@ -161,11 +229,46 @@ def _get_agent_key(agent_name, vault_key_name):
 
     return None
 
-# Inject keys from vault for each agent
-for agent_name in AGENTS:
-    info = AGENTS[agent_name]
-    key = _get_agent_key(agent_name, info.get("vault_key"))
-    AGENTS[agent_name]["key"] = key
+
+def _read_env_export(path, var):
+    """Parse `export VAR=value` (or `VAR=value`) out of a local env file.
+
+    #735 agent separation (2026-09-06): agent creds moved out of the shared
+    /root/.bashrc into per-agent env files under /root/.pi/agent/ (bashrc's
+    source line keeps abiba shells resolving them, but the file of record is
+    env.sh). Do NOT fall back to /root/.bashrc here: desktop (.200) SSH
+    sessions override LITELLM_API_KEY with mumuni's key, so sourcing bashrc
+    would validate the wrong identity.
+    """
+    try:
+        with open(os.path.expanduser(path)) as _f:
+            for line in _f:
+                line = line.strip()
+                if not (line.startswith("export " + var + "=") or line.startswith(var + "=")):
+                    continue
+                value = line.split("=", 1)[1].strip().strip('"').strip("'")
+                if value:
+                    return value
+    except (OSError, UnicodeDecodeError):
+        pass
+    return None
+
+
+def load_agent_keys():
+    """Populate AGENTS[*]["key"] from the vault or the agent's local env file.
+
+    Called from main(), not at import: keeping this out of module scope lets the
+    module be imported (and unit tested) without live vault/SSH access. Vault
+    format is {NAME}_LITELLM_API_KEY (project 322fceab-39da-4854-a55a-568e76c0f13f,
+    env prod); abiba has no vault key and reads LITELLM_API_KEY from its local
+    /root/.pi/agent/env.sh (moved there from /root/.bashrc in #735).
+    """
+    for agent_name in AGENTS:
+        info = AGENTS[agent_name]
+        key = _get_agent_key(agent_name, info.get("vault_key"))
+        if not key and info.get("key_env"):
+            key = _read_env_export(info["key_env"]["file"], info["key_env"]["var"])
+        AGENTS[agent_name]["key"] = key
 
 
 # ═══════════════════════════════════════════════════════════════════
@@ -176,8 +279,8 @@ def check_keys():
     for name, agent in AGENTS.items():
         key = agent.get("key")
         if not key:
-            print(f"  ❌ {name}: NO KEY FOUND (vault empty or unreachable)")
-            FAIL.append(f"key:{name}:no-key")
+            print(f"  ❌ {name}: NO KEY FOUND (vault/env empty or unreachable)")
+            _fail(f"key:{name}:no-key", name)
             continue
         data = http_json(f"{LITELLM}/v1/models",
                          headers={"Authorization": f"Bearer {key}"})
@@ -186,11 +289,11 @@ def check_keys():
             print(f"  ✅ {name}: key valid → {model}")
         else:
             print(f"  ❌ {name}: KEY FAILURE — auth rejected or unreachable")
-            FAIL.append(f"key:{name}")
+            _fail(f"key:{name}", name)
 
 
 # ═══════════════════════════════════════════════════════════════════
-# CHECK 2: GPU Port Conflict Detection (unchanged)
+# CHECK 2: GPU Port Conflict Detection (unit names verified live 2026-09-08)
 # ═══════════════════════════════════════════════════════════════════
 
 def check_gpu_ports():
@@ -199,7 +302,11 @@ def check_gpu_ports():
         port = gpu["port"]
         svc = gpu["service"]
 
-        svc_status = ssh(host, f"systemctl is-active {svc}")
+        # `systemctl is-active` exits non-zero when the unit is inactive or
+        # missing, which the ssh() helper would swallow as an SSH failure and
+        # report as UNREACHABLE. `|| true` keeps the real state word so we can
+        # tell "unit inactive" from "host unreachable".
+        svc_status = ssh(host, f"systemctl is-active {svc} || true")
         port_owner = ssh(host, f"ss -tlnp 2>/dev/null | grep -Po ':{port}\\s+.*pid=\\K[0-9]+' | head -1")
 
         if not svc_status:
@@ -242,28 +349,41 @@ def check_agents():
 
         # Tanko runs on DSH (DeepSeek Harness) since 2026-08-27 — it no longer runs a
         # Hermes gateway, so skip the Hermes gateway/state/streaming/journal checks.
-        if agent.get("runtime") == "dsh":
+        # Non-Hermes runtimes have no gateway to probe. dsh = Tanko since
+        # 2026-08-27; pi = abiba since the harness purge (.24 is pi-only).
+        if agent.get("runtime") in ("dsh", "pi"):
+            is_dsh = agent.get("runtime") == "dsh"
+            label = "DSH (DeepSeek Harness)" if is_dsh else "pi-only runtime"
+            since = "since 2026-08-27" if is_dsh else "since the harness purge"
             live = ssh(host, "true", user=user)
-            print(f"  {'✅' if live is not None else '❌'} {name}: DSH (DeepSeek Harness) — "
-                  f"no Hermes gateway since 2026-08-27 (CT {ct}, SSH {'OK' if live is not None else 'FAIL'})")
+            print(f"  {'✅' if live is not None else '❌'} {name}: {label} — "
+                  f"no Hermes gateway {since} (CT {ct}, SSH {'OK' if live is not None else 'FAIL'})")
             if live is None:
-                FAIL.append(f"unreachable:{name}")
+                _fail(f"unreachable:{name}", name)
             continue
 
         if not host or not user:
             print(f"  ⬜ {name} (CT {ct}): cannot SSH — skip liveness check")
             continue
 
+        # Resolve the Hermes gateway PID once, before the report-only branch:
+        # the summary line below renders `pid`, and it used to be bound only in
+        # the report-only path — leaving it unbound on the abiba/koonimo path
+        # raised UnboundLocalError and crashed the whole check. Agents without
+        # a gateway get pid=?.
+        pid = ssh(host, "pgrep -f '[h]ermes_cli.main gateway run' | grep -v infisical | head -1", user=user)
+        if not pid:
+            pid = ssh(host, "pgrep -f '[h]ermes.*gateway' | grep -v infisical | grep -v bash | head -1", user=user)
+        if not pid:
+            pid = "?"
+
         # ⛔ KOBY IS NEVER REPAIRED — diagnostic only
         if report_only:
             print(f"  🔍 {name}: REPORT-ONLY mode (diagnostic only, no repairs on .129)")
             # Still check gateway status for reporting purposes
-            pid = ssh(host, "pgrep -f 'hermes_cli.main gateway run' | grep -v infisical | head -1", user=user)
-            if not pid:
-                pid = ssh(host, "pgrep -f 'hermes.*gateway' | grep -v infisical | grep -v bash | head -1", user=user)
-            if not pid:
+            if pid == "?":
                 print(f"  ⚠️  {name}: GATEWAY NOT RUNNING (reported only)")
-                FAIL.append(f"gateway-down:{name}")
+                _fail(f"gateway-down:{name}", name)
                 continue
             else:
                 print(f"  ✅ {name}: gateway running (pid={pid}, report-only mode)")
@@ -326,12 +446,12 @@ def check_ct_liveness():
         status = ssh(pve_ip, f"pct status {ct} 2>/dev/null", user="root")
         if not status:
             print(f"  ❌ {name} (CT {ct} on {pve_node}): PVE UNREACHABLE")
-            FAIL.append(f"ct-unreachable:{name}:{pve_ip}")
+            _fail(f"ct-unreachable:{name}:{pve_ip}", name)
         elif "running" in status:
             print(f"  ✅ {name} (CT {ct} on {pve_node}): running")
         elif "stopped" in status:
             print(f"  ❌ {name} (CT {ct} on {pve_node}): STOPPED")
-            FAIL.append(f"ct-stopped:{name}")
+            _fail(f"ct-stopped:{name}", name)
         else:
             print(f"  ⚠️  {name} (CT {ct} on {pve_node}): {status.strip()}")
 
@@ -347,6 +467,9 @@ def check_config_integrity():
         if agent.get("runtime") == "dsh":
             print(f"  ⏭️ {name}: DSH — no Hermes config.yaml since 2026-08-27")
             continue
+        if agent.get("runtime") == "pi":
+            print(f"  ⏭️ {name}: pi-only runtime — no Hermes config.yaml since the harness purge")
+            continue
         host = agent.get("host")
         user = agent.get("user")
         if not host or not user:
@@ -361,18 +484,38 @@ def check_config_integrity():
             user=user)
         if not yaml_ok:
             print(f"  ❌ {name}: SSH UNREACHABLE (config check skipped)")
-            FAIL.append(f"config-unreachable:{name}")
+            _fail(f"config-unreachable:{name}", name)
         elif "OK" in yaml_ok:
             print(f"  ✅ {name}: config.yaml valid YAML")
         else:
             print(f"  ❌ {name}: config.yaml YAML ERROR — {yaml_ok[:120]}")
-            FAIL.append(f"config-yaml-error:{name}")
+            _fail(f"config-yaml-error:{name}", name)
 
 
 # ═══════════════════════════════════════════════════════════════════
 # CHECK 6: Wrapper/CLI Integrity (NEW)
 # ═══════════════════════════════════════════════════════════════════
 
+def _infisical_invocation_paths(wrapper_body):
+    """Absolute infisical paths the wrapper actually invokes.
+
+    Only executed (non-comment) lines count, and only a path followed by a real
+    infisical subcommand (e.g. `/usr/bin/infisical run`) is treated as an
+    invocation. A note such as `# migrated from /usr/local/bin/infisical` is
+    prose, not a call, so it must not manufacture a dangling-path false alarm.
+    """
+    paths = []
+    for line in wrapper_body.splitlines():
+        code = line.split("#", 1)[0]
+        for _m in re.finditer(
+            r"(/[A-Za-z0-9._/-]*infisical)\s+(?:run|export|secrets|login|logout)\b",
+            code,
+        ):
+            if _m.group(1) not in paths:
+                paths.append(_m.group(1))
+    return paths
+
+
 def check_wrapper_integrity():
     """Verify the hermes CLI wrapper exists and can reach hermes-real."""
     for name, agent in AGENTS.items():
@@ -380,6 +523,9 @@ def check_wrapper_integrity():
         if agent.get("runtime") == "dsh":
             print(f"  ⏭️ {name}: DSH — no hermes CLI wrapper since 2026-08-27")
             continue
+        if agent.get("runtime") == "pi":
+            print(f"  ⏭️ {name}: pi-only runtime — no hermes CLI wrapper since the harness purge")
+            continue
         host = agent.get("host")
         user = agent.get("user")
         if not host or not user:
@@ -393,24 +539,56 @@ def check_wrapper_integrity():
             wrapper = ssh(host, "which hermes 2>/dev/null; command -v hermes 2>/dev/null", user=user)
             if not wrapper:
                 print(f"  ❌ {name}: NO HERMES CLI WRAPPER FOUND")
-                FAIL.append(f"wrapper-missing:{name}")
+                _fail(f"wrapper-missing:{name}", name)
                 continue
             else:
                 print(f"  ⚠️  {name}: hermes at {wrapper.strip()} (not ~/.local/bin/hermes)")
 
-        # Check wrapper has correct infisical path
-        infisical_path_valid = ssh(host,
-            "head -20 /root/.local/bin/hermes 2>/dev/null | grep -q '/usr/bin/infisical' && echo OK || echo MISS",
-            user=user)
-        if infisical_path_valid == "MISS":
-            # Check if infisical exists on path
-            inf_actual = ssh(host, "command -v infisical 2>/dev/null", user=user)
-            if not inf_actual:
-                print(f"  ❌ {name}: INFISICAL NOT INSTALLED (wrapper broken)")
-                FAIL.append(f"wrapper-no-infisical:{name}")
+        # Credential-injection mechanism. The Hermes-era wrapper injected creds
+        # with `/usr/bin/infisical run`, but the mechanism is not required to be
+        # infisical at all: koby's wrapper sources the key from ~/.hermes/.env
+        # and never mentions infisical, which is valid. The old check read only
+        # the first 20 lines, so koonimo's wrapper — which DOES reference
+        # /usr/bin/infisical, just past line 20 — false-failed as "path may be
+        # wrong". Read the full body, accept a no-infisical wrapper, and verify
+        # the absolute infisical path(s) the wrapper actually invokes. Only
+        # executed (non-comment) lines count: a comment or dead prose mentioning
+        # a removed path (litellm-api-keys.prose.md documents
+        # `rm -f /usr/local/bin/infisical`) must neither produce a dangling path
+        # nor trigger the PATH check — it is not an invocation.
+        wrapper_body = ssh(host, "cat /root/.local/bin/hermes 2>/dev/null", user=user) or ""
+        wrapper_code = "\n".join(line.split("#", 1)[0] for line in wrapper_body.splitlines())
+        invoked_paths = _infisical_invocation_paths(wrapper_body)
+        if "infisical" in wrapper_code:
+            if invoked_paths:
+                missing = []
+                for _p in invoked_paths:
+                    _exists = ssh(host, f"test -x {_p} && echo OK || echo MISS", user=user)
+                    if not _exists or _exists.strip().splitlines()[-1] != "OK":
+                        missing.append(_p)
+                if len(missing) == len(invoked_paths):
+                    inf_actual = ssh(host, "command -v infisical 2>/dev/null", user=user)
+                    suffix = f" (infisical at {inf_actual})" if inf_actual else ""
+                    print(f"  ❌ {name}: wrapper invokes infisical via missing path(s) "
+                          f"{', '.join(missing)}{suffix}")
+                    _fail(f"wrapper-infisical-path:{name}", name)
+                elif missing:
+                    print(f"  ⚠️  {name}: wrapper has an unused/missing infisical path "
+                          f"({', '.join(missing)}) but a working invocation — informational")
+                elif "/usr/bin/infisical" not in invoked_paths:
+                    print(f"  ⚠️  {name}: wrapper infisical path differs "
+                          f"({', '.join(invoked_paths)}) — informational")
+                else:
+                    print(f"  ✅ {name}: wrapper infisical path OK")
             else:
-                print(f"  ⚠️  {name}: wrapper infisical path may be wrong (infisical at {inf_actual})")
-                FAIL.append(f"wrapper-infisical-path:{name}")
+                inf_actual = ssh(host, "command -v infisical 2>/dev/null", user=user)
+                if not inf_actual:
+                    print(f"  ❌ {name}: wrapper invokes infisical but the binary is MISSING")
+                    _fail(f"wrapper-no-infisical:{name}", name)
+                else:
+                    print(f"  ✅ {name}: wrapper infisical resolves via PATH ({inf_actual})")
+        else:
+            print(f"  ℹ️  {name}: wrapper resolves creds without infisical (e.g. ~/.hermes/.env) — OK")
 
         # Check hermes-real exists
         hermes_real = ssh(host,
@@ -423,7 +601,7 @@ def check_wrapper_integrity():
                 user=user)
             if not hermes_real or hermes_real.strip() == "MISS":
                 print(f"  ❌ {name}: hermes-real NOT FOUND (wrapper broken)")
-                FAIL.append(f"wrapper-no-hermes-real:{name}")
+                _fail(f"wrapper-no-hermes-real:{name}", name)
             else:
                 print(f"  ✅ {name}: hermes-real at alt path")
 
@@ -451,10 +629,10 @@ def check_vault_secrets():
         key = agent.get("key")
         if not key:
             print(f"  ❌ {name}: vault secret {vault_key_name} MISSING or EMPTY")
-            FAIL.append(f"vault-empty:{name}:{vault_key_name}")
+            _fail(f"vault-empty:{name}:{vault_key_name}", name)
         elif not key.startswith("sk-"):
             print(f"  ❌ {name}: vault secret {vault_key_name} WRONG FORMAT (starts '{key[:8]}...')")
-            FAIL.append(f"vault-bad-format:{name}:{vault_key_name}")
+            _fail(f"vault-bad-format:{name}:{vault_key_name}", name)
         else:
             print(f"  ✅ {name}: vault {vault_key_name}=sk-...{key[-4:]}")
 
@@ -487,18 +665,7 @@ def deploy_self():
 # MAIN
 # ═══════════════════════════════════════════════════════════════════
 
-def main():
-    quiet = "--quiet" in sys.argv
-    as_json = "--json" in sys.argv
-
-    # Self-deploy to canonical location
-    if not quiet and "--no-deploy" not in sys.argv:
-        deploy_self()
-
-    if not quiet:
-        print(f"🏥 Agent Health Check v2 — {datetime.now().strftime('%Y-%m-%d %H:%M UTC')}")
-        print()
-
+def _run_checks():
     print("🔑 LiteLLM Keys:")
     check_keys()
     print()
@@ -526,16 +693,49 @@ def main():
     print("🔐 Vault Secrets:")
     check_vault_secrets()
 
+
+def main():
+    quiet = "--quiet" in sys.argv
+    as_json = "--json" in sys.argv
+
+    # Self-deploy to canonical location
+    if not quiet and "--no-deploy" not in sys.argv:
+        deploy_self()
+
+    # Provenance: a report is only actionable if the reader can tell WHICH copy
+    # of this script produced it. A normal run carries it in the header, --json
+    # carries it for machine consumers, and the cron ALERT line carries it on
+    # failure. --quiet is documented as "only output on failure", so the header
+    # is emitted only when not quiet and a healthy quiet run stays silent.
+    script_path = os.path.abspath(__file__)
+    cwd = os.getcwd()
+
+    if quiet:
+        captured = io.StringIO()
+        with contextlib.redirect_stdout(captured):
+            load_agent_keys()
+            _run_checks()
+        if FAIL:
+            sys.stdout.write(captured.getvalue())
+    else:
+        print(f"🏥 Agent Health Check v4 — {datetime.now().strftime('%Y-%m-%d %H:%M UTC')}")
+        print(f"📍 executed from: script={script_path} cwd={cwd}")
+        print()
+        load_agent_keys()
+        _run_checks()
+
     if FAIL:
         print(f"\n❌ {len(FAIL)} FAILURE(S): {' | '.join(FAIL)}")
         if quiet:
-            print(f"ALERT agent-health:{','.join(FAIL)}")
+            print(f"ALERT agent-health:{','.join(FAIL)} script={script_path} cwd={cwd}")
     elif not quiet:
         print("\n✅ All checks passed")
 
     if as_json:
         print(json.dumps({"timestamp": datetime.now().isoformat(),
-                          "failures": FAIL, "healthy": len(FAIL) == 0}))
+                          "execution_path": script_path, "cwd": cwd,
+                          "failures": FAIL, "report_only": REPORT_ONLY,
+                          "healthy": len(FAIL) == 0}))
 
     sys.exit(1 if FAIL else 0)
 

scripts/capture-dsh-token.sh

@@ -0,0 +1,227 @@
+#!/usr/bin/env bash
+# capture-dsh-token.sh — refresh the dsh-web login token WITHOUT restarting dsh-web.
+#
+# Context (CT 112 / tankodhs.sysloggh.net)
+# ----------------------------------------
+# The dsh-web UI (systemd unit `dsh-web.service`, 127.0.0.1:3080) prints a random
+# launch token to the journal on every start:
+#
+#     dsh web: http://127.0.0.1:3080/?token=<TOKEN>
+#
+# That token is the only way to bootstrap the authority-bound 30-day browser
+# cookie. It rotates on every dsh-web start, so the Authentik-gated
+# `location = /dsh-web-login` in /etc/nginx/sites-available/dsh must always
+# reference the token of the RUNNING process.
+#
+# This script:
+#   1. selects the launch token the RUNNING service actually accepts from the
+#      current systemd invocation — it NEVER stops or starts dsh-web,
+#   2. records it in /etc/dsh-web/launch-token,
+#   3. regenerates the nginx include /etc/dsh-web/nginx-login.conf (the
+#      `proxy_pass ...?token=` line consumed by /dsh-web-login),
+#   4. reloads nginx ONLY when the on-disk include differs from the generated
+#      one or the applied-state stamp does not match the token (the stamp is
+#      written only after a successful reload), rolling the include back on
+#      failure so the next run retries,
+#   5. removes the legacy unauthenticated :8081 endpoint if it ever reappears.
+#
+# Idempotent and safe to run at any time (systemd ExecStartPost or timer).
+set -euo pipefail
+umask 077
+PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
+
+JOURNAL_UNIT="dsh-web.service"
+TOKEN_FILE="/etc/dsh-web/launch-token"
+INCLUDE_FILE="/etc/dsh-web/nginx-login.conf"
+STAMP_FILE="/etc/dsh-web/nginx-login.conf.applied"
+PENDING_FILE="/etc/dsh-web/nginx-reload.pending"
+SITE_ENABLED="/etc/nginx/sites-enabled/dsh"
+LEGACY_8081="/etc/nginx/sites-enabled/dsh.token"
+STASH_DIR="/etc/nginx/sites-available"
+LOCK_FILE="/run/capture-dsh-token.lock"
+LOGIN_HOST="tankodhs.sysloggh.net"
+LOGIN_UPSTREAM="http://127.0.0.1:3080"
+TOKEN_WAIT=120
+
+log()  { printf 'capture-dsh-token: %s\n' "$*" >&2; }
+die()  { printf 'capture-dsh-token: ERROR: %s\n' "$*" >&2; exit 1; }
+
+[ "$(id -u)" -eq 0 ] || die "must run as root"
+
+# ── 0. Serialize runs so timer/ExecStartPost/manual runs cannot interleave ──
+exec 9>"$LOCK_FILE"
+flock -n 9 || { log "another capture-dsh-token run holds $LOCK_FILE; exiting"; exit 0; }
+mkdir -p "$(dirname "$PENDING_FILE")"
+
+# ── 0b. Guarantee the generated include exists before any `nginx -t` ──────
+# The :80 site includes /etc/dsh-web/nginx-login.conf by literal path, so a
+# missing include makes every `nginx -t` fail and can wedge recovery. Seed it
+# from the last known token (or a placeholder); step 4 replaces it.
+if [ ! -f "$INCLUDE_FILE" ]; then
+  SEED="placeholder"
+  if [ -f "$TOKEN_FILE" ]; then
+    SEED="$(cat "$TOKEN_FILE" 2>/dev/null || true)"
+    [ -n "$SEED" ] || SEED="placeholder"
+  fi
+  printf '%s' "$SEED" | grep -qE '^[A-Za-z0-9._~+/=:@-]+$' || SEED="placeholder"
+  printf 'proxy_pass %s/?token=%s;\n' "$LOGIN_UPSTREAM" "$SEED" > "$INCLUDE_FILE"
+  chmod 600 "$INCLUDE_FILE"
+  log "created missing $INCLUDE_FILE"
+fi
+
+# ── 1. Remove the legacy unauthenticated :8081 endpoint, if present ─────────
+# It bypassed Authentik entirely (listened on 0.0.0.0:8081 with no auth_request)
+# and must never come back. Stash it rather than delete so it is auditable.
+if [ -e "$LEGACY_8081" ] || [ -L "$LEGACY_8081" ]; then
+  TS="$(date -u +%Y%m%dT%H%M%SZ)"
+  STASHED="$STASH_DIR/dsh.token.disabled-$TS"
+  mv "$LEGACY_8081" "$STASHED"
+  chmod 600 "$STASHED" 2>/dev/null || true
+  touch "$PENDING_FILE"
+  if ! NGINX_TEST_OUT="$(nginx -t 2>&1)"; then
+    die "nginx config test failed after disabling $LEGACY_8081 (kept disabled at $STASHED): $NGINX_TEST_OUT; a pending reload is recorded so running nginx is reloaded once the config is fixed. The legacy :8081 endpoint will NOT be restored."
+  fi
+  if ! nginx -s reload; then
+    die "nginx reload failed after disabling $LEGACY_8081 (kept disabled at $STASHED); a pending reload is recorded so running nginx is reloaded on the next run. The legacy :8081 endpoint will NOT be restored."
+  fi
+  rm -f "$PENDING_FILE"
+  log "removed legacy :8081 endpoint -> $STASHED"
+fi
+
+# ── 1b. Honor a recorded pending reload regardless of token selection ───────
+# A failed reload leaves PENDING_FILE set so a stashed legacy :8081 file can
+# never remain loaded in the running nginx while dsh-web is down or not yet
+# answering. Reconcile it before the token wait.
+if [ -e "$PENDING_FILE" ]; then
+  if ! NGINX_TEST_OUT="$(nginx -t 2>&1)"; then
+    log "WARNING: pending nginx reload recorded but 'nginx -t' fails: $NGINX_TEST_OUT; continuing so the include can be regenerated; will retry next run"
+  elif ! nginx -s reload; then
+    log "WARNING: pending nginx reload recorded but 'nginx -s reload' failed; will retry next run"
+  else
+    rm -f "$PENDING_FILE"
+    log "completed pending nginx reload"
+  fi
+fi
+
+# ── 2. Select the token the RUNNING service actually accepts ────────────────
+# Re-sample the service's CURRENT systemd invocation on every pass and read
+# candidates only from it, so a restart that lands during the wait immediately
+# switches to the new invocation; there is no whole-journal or cross-invocation
+# fallback, and an empty/unknown invocation just waits. Each candidate is then
+# functionally verified against the local dsh-web using the public authority,
+# exactly as the /dsh-web-login proxy does, and the first that answers 303 is
+# the live token. Candidates are re-probed newest-first on each pass (connection
+# failures stay eligible) until one is accepted or the wait elapses.
+journal_tokens() {
+  journalctl -u "$JOURNAL_UNIT" "_SYSTEMD_INVOCATION_ID=$1" --no-pager -o cat 2>/dev/null \
+    | grep -oE 'dsh web: https?://[^[:space:]]+[?&]token=[^[:space:]]+' \
+    | sed -E 's/.*[?&]token=//' \
+    | grep -E '^[A-Za-z0-9._~+/=:@-]+$' \
+    | tac | awk '!seen[$0]++' || true
+}
+
+TOKEN=""
+DEADLINE=$((SECONDS + TOKEN_WAIT))
+NO_INVOCATION_WARNED=0
+while [ -z "$TOKEN" ] && [ "$SECONDS" -lt "$DEADLINE" ]; do
+  INVOCATION="$(systemctl show -p InvocationID --value "$JOURNAL_UNIT" 2>/dev/null || true)"
+  if [ -z "$INVOCATION" ] || [ "$INVOCATION" = "n/a" ]; then
+    if [ "$NO_INVOCATION_WARNED" -eq 0 ]; then
+      log "WARNING: no invocation id for $JOURNAL_UNIT; waiting for a live invocation"
+      NO_INVOCATION_WARNED=1
+    fi
+    sleep 2
+    continue
+  fi
+  for cand in $(journal_tokens "$INVOCATION"); do
+    code="$(curl -s -o /dev/null --max-time 5 -w '%{http_code}' \
+      -H "Host: $LOGIN_HOST" "$LOGIN_UPSTREAM/?token=$cand" || true)"
+    if [ "$code" = "303" ]; then
+      TOKEN="$cand"
+      break
+    fi
+  done
+  [ -n "$TOKEN" ] && break
+  sleep 2
+done
+
+if [ -z "$TOKEN" ]; then
+  log "no accepted launch token in the current invocation within ${TOKEN_WAIT}s; leaving the include untouched for the next run"
+  [ -e "$PENDING_FILE" ] && die "pending nginx reload could not be completed; will retry next run"
+  exit 0
+fi
+
+# ── 3. Record the token (atomic, private) ──────────────────────────────────
+mkdir -p "$(dirname "$TOKEN_FILE")"
+if ! printf '%s\n' "$TOKEN" | cmp -s - "$TOKEN_FILE" 2>/dev/null; then
+  printf '%s\n' "$TOKEN" > "$TOKEN_FILE.tmp"
+  chmod 600 "$TOKEN_FILE.tmp"
+  mv "$TOKEN_FILE.tmp" "$TOKEN_FILE"
+  log "recorded live launch token in $TOKEN_FILE"
+fi
+chmod 600 "$TOKEN_FILE"
+
+# ── 4. Regenerate the nginx login include (reload only when it changes) ────
+NEW_INCLUDE="$(mktemp "$INCLUDE_FILE.XXXXXX")"
+printf 'proxy_pass %s/?token=%s;\n' "$LOGIN_UPSTREAM" "$TOKEN" > "$NEW_INCLUDE"
+chmod 600 "$NEW_INCLUDE"
+
+# The stamp records the token nginx actually loaded. It is written only after a
+# successful reload, so the early exit is safe only when both the stamp and the
+# on-disk include agree with the live token; anything else falls through to the
+# reload path so the include can never silently diverge from what nginx serves.
+APPLIED=""
+[ -f "$STAMP_FILE" ] && APPLIED="$(cat "$STAMP_FILE" 2>/dev/null || true)"
+[ -f "$INCLUDE_FILE" ] && chmod 600 "$INCLUDE_FILE"
+[ -f "$STAMP_FILE" ] && chmod 600 "$STAMP_FILE"
+
+if [ "$APPLIED" = "$TOKEN" ] && [ -f "$INCLUDE_FILE" ] && cmp -s "$NEW_INCLUDE" "$INCLUDE_FILE" \
+  && [ ! -e "$PENDING_FILE" ]; then
+  rm -f "$NEW_INCLUDE"
+  log "token unchanged; nginx not reloaded"
+  exit 0
+fi
+
+[ -e "$SITE_ENABLED" ] || { rm -f "$NEW_INCLUDE"; die "$SITE_ENABLED missing; refusing to reload"; }
+
+RESTORE=""
+if [ -f "$INCLUDE_FILE" ]; then
+  RESTORE="$(mktemp "$INCLUDE_FILE.bak.XXXXXX")"
+  cp -p "$INCLUDE_FILE" "$RESTORE"
+  chmod 600 "$RESTORE"
+fi
+
+mv "$NEW_INCLUDE" "$INCLUDE_FILE"
+chmod 600 "$INCLUDE_FILE"
+
+if ! NGINX_TEST_OUT="$(nginx -t 2>&1)"; then
+  if [ -n "$RESTORE" ]; then
+    mv "$RESTORE" "$INCLUDE_FILE"
+  else
+    rm -f "$INCLUDE_FILE"
+  fi
+  die "nginx config test failed: $NGINX_TEST_OUT; previous include restored"
+fi
+
+if ! nginx -s reload; then
+  if [ -n "$RESTORE" ]; then
+    mv "$RESTORE" "$INCLUDE_FILE"
+  else
+    rm -f "$INCLUDE_FILE"
+  fi
+  touch "$PENDING_FILE"
+  die "nginx reload failed; previous include restored; a pending reload is recorded so the next run retries"
+fi
+
+if [ -n "$RESTORE" ]; then
+  rm -f "$RESTORE"
+fi
+
+rm -f "$PENDING_FILE"
+
+printf '%s\n' "$TOKEN" > "$STAMP_FILE.tmp"
+chmod 600 "$STAMP_FILE.tmp"
+mv "$STAMP_FILE.tmp" "$STAMP_FILE"
+
+log "token changed; nginx reloaded"
+log "login endpoint: https://$LOGIN_HOST/dsh-web-login (Authentik-gated)"

scripts/daily-infra-report.py

@@ -15,7 +15,7 @@ import smtplib, json, subprocess, os, sys, datetime, re
 from email.mime.text import MIMEText
 from email.mime.multipart import MIMEMultipart
 
-PVE = "https://minipve.sysloggh.net"
+PVE = "https://192.168.68.12:8006"
 AUTH = "Authorization: PVEAPIToken=monitoring@pve!mumuni=eafd56c5-93d4-4d40-a41d-e688be0987f3"
 
 # ── Shared credentials —─
@@ -29,7 +29,13 @@ LITELLM_PUBLIC = "https://litellm.sysloggh.net"
 LITELLM_BACKEND = "192.168.68.116"
 AUTH_HOST = "192.168.68.11"
 
-SYNTHETIC_API_KEY = "sk-U_ydi3B-wfGU-_xESkoU1Q"
+# Load LiteLLM API key from file (durable, works in cron)
+LITELLM_KEY_FILE = "/root/.abiba-workspace/secrets/litellm-key.txt"
+try:
+    with open(LITELLM_KEY_FILE) as f:
+        SYNTHETIC_API_KEY = f.read().strip()
+except:
+    SYNTHETIC_API_KEY = None  # Fail loudly: report "no-key-file" in check
 
 NOW = datetime.datetime.now()
 DATE_STR = NOW.strftime("%Y-%m-%d")
@@ -38,10 +44,16 @@ TIME_STR = NOW.strftime("%Y-%m-%d %H:%M UTC")
 # ── Helpers ──
 
 def pve_get(path):
-    cmd = f'curl -sfk --connect-timeout 10 "{PVE}{path}" -H "{AUTH}"'
+    """Fetch PVE API data. Returns list on success, None on error (to distinguish from empty list)."""
+    cmd = f'curl -sk --connect-timeout 10 "{PVE}{path}" -H "{AUTH}"'
     try:
-        return json.loads(subprocess.check_output(cmd, shell=True))["data"]
-    except: return []
+        r = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=12)
+        if r.returncode != 0:
+            return None
+        data = json.loads(r.stdout)
+        return data.get("data", [])
+    except:
+        return None
 
 def ssh(host, cmd):
     try:
@@ -62,7 +74,7 @@ def http_get(url, auth=None, timeout=10):
         cmd = f'curl -sfk --connect-timeout {timeout} -o /dev/null -w "%{{http_code}}" "{url}"'
         if auth:
             cmd = cmd.replace('"', '\\"')
-            cmd = f'curl -sfk --connect-timeout {timeout} -u "{auth}" -o /dev/null -w "%{{http_code}}" "{url}"'
+            cmd = f'curl -sfk --connect-timeout {timeout} -H "Authorization: Bearer {auth}" -o /dev/null -w "%{{http_code}}" "{url}"'
         r = subprocess.run(cmd, shell=True, capture_output=True, text=True, timeout=timeout+2)
         return r.stdout.strip() or "000"
     except:
@@ -97,21 +109,33 @@ def collect():
     
     # ── Proxmox Nodes ──
     nodes = pve_get("/api2/json/nodes")
-    report["nodes"] = {n["node"]: {
-        "cpu_pct": round(n.get('cpu',0)*100, 1),
-        "ram": f"{n.get('mem',0)//1024//1024}/{n.get('maxmem',0)//1024//1024}MB",
-        "ram_pct": round(n.get('mem',0)/n.get('maxmem',1)*100, 0),
-        "disk": f"{n.get('disk',0)//1024//1024//1024}/{n.get('maxdisk',0)//1024//1024//1024}GB",
-        "disk_pct": round(n.get('disk',0)/n.get('maxdisk',1)*100, 0),
-        "uptime_h": n.get('uptime',0)//3600,
-        "status": n["status"]
-    } for n in nodes}
-    report["node_count"] = len(nodes)
-    report["nodes_online"] = sum(1 for n in nodes if n["status"] == "online")
+    if nodes is None:
+        report["nodes"] = {}
+        report["node_count"] = 0
+        report["nodes_online"] = 0
+        report["pve_probe_status"] = "unreachable"
+    else:
+        report["nodes"] = {n["node"]: {
+            "cpu_pct": round(n.get('cpu',0)*100, 1),
+            "ram": f"{n.get('mem',0)//1024//1024}/{n.get('maxmem',0)//1024//1024}MB",
+            "ram_pct": round(n.get('mem',0)/n.get('maxmem',1)*100, 0),
+            "disk": f"{n.get('disk',0)//1024//1024//1024}/{n.get('maxdisk',0)//1024//1024//1024}GB",
+            "disk_pct": round(n.get('disk',0)/n.get('maxdisk',1)*100, 0),
+            "uptime_h": n.get('uptime',0)//3600,
+            "status": n["status"]
+        } for n in nodes}
+        report["node_count"] = len(nodes)
+        report["nodes_online"] = sum(1 for n in nodes if n["status"] == "online")
+        report["pve_probe_status"] = "ok"
     
     # ── VMs/CTs ──
     resources = pve_get("/api2/json/cluster/resources")
-    vms = [r for r in resources if r.get("type") in ("qemu","lxc")]
+    if resources is None:
+        vms = []
+        report["resources_probe_status"] = "unreachable"
+    else:
+        vms = [r for r in resources if r.get("type") in ("qemu","lxc")]
+        report["resources_probe_status"] = "ok"
     report["total_vms"] = len(vms)
     report["running_vms"] = sum(1 for v in vms if v.get("status") == "running")
     stopped = [v for v in vms if v.get("status") != "running"]
@@ -183,7 +207,7 @@ def collect():
         ("Authentik", "https://auth.sysloggh.net"),
         ("Zulip", "https://chat.sysloggh.net"),
         ("Pulse", "https://pulse.sysloggh.net"),
-        ("Proxmox", "https://minipve.sysloggh.net"),
+        ("Proxmox", "https://192.168.68.12:8006"),
         ("SearXNG", "http://192.168.68.7:8888"),
         ("Firecrawl", "http://192.168.68.7:3002/health"),
     ]
@@ -195,10 +219,11 @@ def collect():
     # ── LiteLLM Specific Checks (from litellm-health prose contract) ──
     report["litellm"] = {"checks": []}
     
-    # Check 1: LiteLLM aggregate health endpoint (router binds to 127.0.0.1, check via SSH)
-    health_unified = ssh(LITELLM_BACKEND, "curl -sf http://127.0.0.1:9000/health/unified -o /dev/null -w '%{http_code}' 2>/dev/null")
+    # Check 1: Fleet health via nginx /health/unified (301 -> /gpu/gpu-data served by gpu-monitor on .24:9100).
+    # Router (:9000) was decommissioned 2026-09-11; probing it was a guaranteed daily failure.
+    health_unified = ssh(LITELLM_BACKEND, "curl -s -o /dev/null -w '%{http_code}' --max-time 8 http://127.0.0.1/health/unified 2>/dev/null")
     report["litellm"]["health_unified"] = health_unified or "000"
-    report["litellm"]["checks"].append({"name": "unified-health", "status": "pass" if health_unified == "200" else "fail", "code": health_unified or "000"})
+    report["litellm"]["checks"].append({"name": "fleet-health-via-nginx", "status": "pass" if health_unified in ("200", "301") else "fail", "code": health_unified or "000"})
     
     # Check 2: Nginx-proxied internal endpoints
     for path, name in [("/litellm/ui/", "nginx-ui"), ("/litellm/docs", "nginx-docs")]:
@@ -206,8 +231,11 @@ def collect():
         report["litellm"]["checks"].append({"name": name, "status": "pass" if code == "200" else "fail", "code": code})
     
     # Check 3: Docker container health for LiteLLM stack
-    expected_containers = ["harness-litellm", "harness-nginx", "harness-router",
-                          "harness-postgres", "harness-redis", "harness-dashboard"]
+    expected_containers = ["harness-litellm", "harness-nginx", "harness-postgres",
+                          "harness-redis", "harness-dashboard", "harness-grafana",
+                          "harness-prometheus", "harness-alertmanager",
+                          "harness-zulip-bridge", "harness-docker-stats",
+                          "harness-pve-exporter"]
     actual_names = [c["name"] for c in containers2]
     report["litellm"]["expected_containers"] = expected_containers
     report["litellm"]["missing_containers"] = [e for e in expected_containers if e not in actual_names]
@@ -225,9 +253,13 @@ def collect():
     report["litellm"]["checks"].append({"name": "oidc-auth", "status": "pass" if auth_code in ("200","302") else "fail", "code": auth_code})
     
     # Check 5: Synthetic API call through LiteLLM
-    api_check = http_get(f"{LITELLM_PUBLIC}/v1/models", auth=SYNTHETIC_API_KEY)
-    report["litellm"]["api_models"] = api_check
-    report["litellm"]["checks"].append({"name": "api-endpoint", "status": "pass" if api_check == "200" else "fail", "code": api_check})
+    if SYNTHETIC_API_KEY is None:
+        report["litellm"]["api_models"] = None
+        report["litellm"]["checks"].append({"name": "api-endpoint", "status": "fail", "code": "no-key-file"})
+    else:
+        api_check = http_get(f"{LITELLM_PUBLIC}/v1/models", auth=SYNTHETIC_API_KEY)
+        report["litellm"]["api_models"] = api_check
+        report["litellm"]["checks"].append({"name": "api-endpoint", "status": "pass" if api_check == "200" else "fail", "code": api_check})
     
     # ── NFS Mounts ──
     nfs = ssh("192.168.68.7", "df -h /media/storage /media/mediastore 2>/dev/null | tail -n +2")
@@ -247,11 +279,13 @@ def collect():
         zulip_health = json.loads(health_body) if health_body else {}
     except:
         zulip_health = {}
-    report["zulip_ext"]["connected"] = zulip_health.get("connected", False)
-    report["zulip_ext"]["queue_id"] = zulip_health.get("queue_id")
-    report["zulip_ext"]["last_error"] = zulip_health.get("last_error")
-    report["zulip_ext"]["messages_processed"] = zulip_health.get("messages_processed", 0)
-    report["zulip_ext"]["retry_count"] = zulip_health.get("retry_count", 0)
+    # Live state is nested under 'zulip' key
+    zulip_state = zulip_health.get("zulip", {})
+    report["zulip_ext"]["connected"] = zulip_state.get("connected", False)
+    report["zulip_ext"]["queue_id"] = zulip_state.get("queue_id")
+    report["zulip_ext"]["last_error"] = zulip_state.get("last_error")
+    report["zulip_ext"]["messages_processed"] = zulip_state.get("messages_processed", 0)
+    report["zulip_ext"]["skipped"] = zulip_state.get("skipped", 0)
     
     # Phase 2: PM2 process check
     pm2_raw = subprocess.check_output(
@@ -289,8 +323,8 @@ def collect():
     # Abiba (pi)
     report["agents"]["abiba"] = {
         "platform": "pi", "ct": 100, "ip": "192.168.68.24",
-        "zulip_connected": zulip_health.get("connected", False),
-        "zulip_processed": zulip_health.get("messages_processed", 0),
+        "zulip_connected": zulip_state.get("connected", False),
+        "zulip_processed": zulip_state.get("messages_processed", 0),
         "pm2_status": pm2.get("status", "unknown"),
         "pm2_restarts": pm2.get("restarts", "?"),
         "pm2_uptime": pm2.get("uptime", "?"),
@@ -308,26 +342,13 @@ def collect():
         "updated_at": "",
     }
     
-    # Mumuni (CT 100, IP 192.168.68.24)
-    mumuni_state = ssh("192.168.68.24", "cat ~/.hermes/gateway_state.json 2>/dev/null")
-    mumuni_data = {}
-    try:
-        mumuni_data = json.loads(mumuni_state) if mumuni_state else {}
-    except:
-        mumuni_data = {}
-    mumuni_platforms = mumuni_data.get("platforms", {})
-    report["agents"]["mumuni"] = {
-        "platform": "hermes", "ct": 100, "ip": "192.168.68.24",
-        "gateway_state": mumuni_data.get("gateway_state", "unknown"),
-        "telegram_state": mumuni_platforms.get("telegram", {}).get("state", "unknown"),
-        "zulip_state": mumuni_platforms.get("zulip", {}).get("state", "not_installed"),
-        "email_state": mumuni_platforms.get("email", {}).get("state", "unknown"),
-        "hermes_version": "",
-    }
-    # Get Hermes version
-    ver = ssh("192.168.68.24", "hermes --version 2>/dev/null | head -1")
-    if ver:
-        report["agents"]["mumuni"]["hermes_version"] = ver.split("·")[0].replace("Hermes Agent ","").strip()
+    # Mumuni is deliberately absent from this digest: captain ruling 2026-09-10.
+    # She moved off this host onto her own container (kagentz CT 105 on minipve,
+    # 192.168.68.14, dedicated `hermes` user) and is monitored from her side. The
+    # former probe ssh'd to 192.168.68.24 for the decommissioned deployment's
+    # ~/.hermes/gateway_state.json, always read "unknown", and published a false
+    # "mumuni:unknown" line in the agent table and the gateway-unknown issue
+    # count of every digest. Do NOT re-add an .24 / gateway_state probe.
     
     return report
 
@@ -419,7 +440,7 @@ th {{ color: #8b949e; font-weight: normal; }}
 <div class="alert {'good' if not issues else 'bad' if any('🔴' in i for i in issues) else 'warn'}">
 <p style="margin:0;font-size:16px"><b>{status}</b></p>
 <p style="margin:4px 0 0 0;font-size:13px">
-{r['node_count']} PVE nodes · {r['total_vms']} VMs/CTs · {r['running_vms']} running · 
+Proxmox: {r.get('pve_probe_status', 'ok')} ({r['nodes_online']}/{r['node_count']}) · {r['total_vms']} VMs/CTs · {r['running_vms']} running · 
 {r['docker_vm']['total'] + r['docker_syslog']['total'] + r['docker_netbird']['total']} containers · 
 {len(r['endpoints'])} endpoints · {len(r.get('agents',{}))} agents
 </p>
@@ -435,8 +456,10 @@ th {{ color: #8b949e; font-weight: normal; }}
     
     # ── Quick Stats ──
     html += '<div class="card"><h2>📊 Quick Stats</h2><div class="grid">'
+    pve_status_label = "unreachable" if r.get('pve_probe_status') == 'unreachable' else f"{r['nodes_online']}/{r['node_count']}"
+    pve_status_color = "red" if r.get('pve_probe_status') == 'unreachable' or r['nodes_online'] != r['node_count'] else "green"
     stats = [
-        ("PVE Nodes", f"{r['nodes_online']}/{r['node_count']}", "green" if r['nodes_online'] == r['node_count'] else "red"),
+        ("PVE Nodes", pve_status_label, pve_status_color),
         ("VMs/CTs", f"{r['running_vms']}/{r['total_vms']}", "green" if r['running_vms'] == r['total_vms'] else "red"),
         ("Containers", f"{r['docker_vm']['running']}/{r['docker_vm']['total']}", "green" if r['docker_vm']['running'] == r['docker_vm']['total'] else "yellow"),
         ("LiteLLM Ctrs", f"{r['docker_syslog']['running']}/{r['docker_syslog']['total']}", "green" if r['docker_syslog']['running'] == r['docker_syslog']['total'] else "red"),
@@ -539,12 +562,6 @@ th {{ color: #8b949e; font-weight: normal; }}
             zulip_state = "✅" if agent.get("zulip_state") == "connected" else ("❌" if agent.get("zulip_state") == "disconnected" else "⬜")
             gateway = agent.get("gateway_state", "?")
             processed = "DSH"
-        elif name == "mumuni":
-            zulip_state = "⬜" if agent.get("zulip_state") == "not_installed" else ("✅" if agent.get("zulip_state") == "connected" else "⬜")
-            gateway = agent.get("gateway_state", "?")
-            tg = "✅" if agent.get("telegram_state") == "connected" else "❌"
-            ver = agent.get("hermes_version", "")
-            processed = f"TG:{tg} v{ver}"
         else:
             zulip_state = "⬜"
             gateway = agent.get("gateway_state", "?")
@@ -698,6 +715,6 @@ if __name__ == "__main__":
     print(f"   Zulip Ext: {'✅' if report.get('zulip_ext',{}).get('connected') else '❌'}")
     print(f"   LiteLLM: {sum(1 for c in report.get('litellm',{}).get('checks',[]) if c['status']=='pass')}/{len(report.get('litellm',{}).get('checks',[]))} checks pass")
     agent_parts = []
-for k,v in report.get('agents',{}).items():
-    agent_parts.append(f"{k}:{v.get('gateway_state',v.get('pm2_status','?'))}")
-print(f"   Agents: {', '.join(agent_parts)}")
+    for k,v in report.get('agents',{}).items():
+        agent_parts.append(f"{k}:{v.get('gateway_state',v.get('pm2_status','?'))}")
+    print(f"   Agents: {', '.join(agent_parts)}")

scripts/pm2-self-heal.sh

@@ -5,6 +5,7 @@
 # Field positions (awk -F'│'): $7=pid $8=uptime $9=restarts $10=status
 
 TELEGRAM_BOT_TOKEN="$(grep TELEGRAM_BOT_TOKEN /root/.pi/agent/extensions/telegram/.env 2>/dev/null | cut -d= -f2 || echo '')"
+LOG="/root/pm2-self-heal.log"
 TELEGRAM_CHAT_ID="5822977936"
 
 notify_tg() {
@@ -16,8 +17,6 @@ notify_tg() {
         -d "text=${msg}" \
         -d "parse_mode=HTML" > /dev/null 2>&1 || true
 }
-    ALERTS="${ALERTS}$msg"
-}
 
 # Log-only mode: replaced by prose contract pm2-self-heal.prose.md
 # Only alerts Telegram on actual failure (status != online)

scripts/prose-ai-review.sh

@@ -66,11 +66,13 @@ The infrastructure-control.prose.md contract is the canonical reference for the
 2. NO .19 IP — Zulip is CT 117 on storepve.
 3. NO CT 122/123 — Tanko=CT 112, Mumuni=CT 100 (inside Abiba). No CT 114 anywhere.
 4. Strix Halo :8080 is FIREWALLED to .116 only — cannot be probed from abiba (.24).
-5. abiba-zulip PM2 process is DECOMMISSIONED (2026-07-04) — abiba uses Telegram only.
+5. abiba-zulip PM2 process is ONLINE (verified 2026-09-11) — this rule was stale.
 
-**Docker on CT 116 (8 containers):**
-harness-litellm, harness-router, harness-nginx, harness-postgres, 
-harness-redis, harness-dashboard, harness-grafana, harness-prometheus
+**Docker on CT 116 (11 containers, verified 2026-09-11):**
+harness-litellm, harness-nginx, harness-postgres, harness-redis,
+harness-dashboard, harness-grafana, harness-prometheus, harness-alertmanager,
+harness-zulip-bridge, harness-docker-stats, harness-pve-exporter
+(harness-router was decommissioned 2026-09-11)
 
 ## DIFF TO REVIEW
 

scripts/prose-lint.sh

@@ -57,7 +57,7 @@ echo "── 2. Regression detection ──"
 
 # Grafana /grafana/ as nginx route or URL path (reverted 2026-07-02)
 # EXCLUDE: filesystem paths (/opt/monitoring/grafana/...), directory creation, revert docs
-GRAFANA_HITS=$(grep -rn '/grafana/' *.prose.md 2>/dev/null \
+GRAFANA_HITS=$(grep -rn '/grafana/' ./*.prose.md 2>/dev/null \
   | grep -v '/opt/monitoring/grafana/' \
   | grep -v 'was tried and reverted\|was reverted\|do not re-add\|NOT recommended' \
   | grep -v 'mkdir.*grafana\|Create.*grafana' \
@@ -71,7 +71,7 @@ else
 fi
 
 # Stale CT IDs (CT 122, CT 123 as CT IDs — not IPs .122, .123)
-CT_STALE=$(grep -rn '\bCT 122\b' *.prose.md 2>/dev/null || true)
+CT_STALE=$(grep -rn '\bCT 122\b' ./*.prose.md 2>/dev/null || true)
 if [ -n "$CT_STALE" ]; then
   echo "  ❌ REGRESSION: CT 122 used as CT ID — Tanko is CT 112"
   echo "$CT_STALE"
@@ -84,6 +84,35 @@ fi
 # .122/.123 are correct — verified reachable bridge IPs for Tanko/Mumuni
 echo "  ✅ IP consistency verified (.19=.122=.123 all reachable)"
 
+# Report provenance — every contract report must state the absolute path it
+# executed from, so a stale-consumer report is distinguishable from a real fault
+# at read time (2026-09-09 probe-drift incident: three false DEGRADED rounds).
+# Enforced only inside the **Report format** paragraph, and a check-health
+# contract with no Report format paragraph FAILs rather than being skipped.
+PROV_FILES=$(grep -rlE '^### check-health|\*\*Report format\*\*' ./*.prose.md 2>/dev/null || true)
+if [ -z "$PROV_FILES" ]; then
+  echo "  ❌ No check-health/report-format contracts found — provenance not enforced"
+  FAILED=1
+else
+  PROV_BAD=0
+  while IFS= read -r f; do
+    [ -n "$f" ] || continue
+    REPORT_PARA=$(awk '/\*\*Report format\*\*/{found=1} found{print} found && /^[[:space:]]*$/{exit}' "$f")
+    if [ -z "$REPORT_PARA" ]; then
+      echo "  ❌ $f: check-health contract has no **Report format** paragraph"
+      PROV_BAD=1
+    elif ! printf '%s\n' "$REPORT_PARA" | grep -qE 'absolute path|pwd -P|executed from'; then
+      echo "  ❌ $f: **Report format** lacks execution provenance (absolute path / pwd -P)"
+      PROV_BAD=1
+    fi
+  done <<< "$PROV_FILES"
+  if [ "$PROV_BAD" -eq 1 ]; then
+    FAILED=1
+  else
+    echo "  ✅ Report provenance present in all report-format contracts"
+  fi
+fi
+
 # ── 3. Cross-contract consistency ──
 echo ""
 echo "── 3. Cross-contract consistency ──"

scripts/zulip-monitor.sh

@@ -1,7 +1,10 @@
 #!/bin/bash
 # /root/scripts/zulip-monitor.sh — Zulip Mesh Health Monitor
-# Implements zulip-health.prose.md v2
-# Runs every 15 min via cron. Alerts via Telegram.
+# Implements zulip-health.prose.md v3
+# Runs every 15 min via cron. Alerts: Zulip private DM to the owner plus a stream post to #agent-hub on topic 'zulip-health'.
+# Legs: global Zulip server, Platform A pi/Abiba (the Zulip bridge), Platform B
+# Tanko (DSH), Platform C Agent Zero (kagentz). The former Platform B Hermes
+# agent leg is retired — see the note after the Tanko leg.
 set -euo pipefail
 
 ZULIP_SITE="https://chat.sysloggh.net"
@@ -21,7 +24,8 @@ notify() {
   
   # Zulip DM to owner
   local content="${severity} Zulip Monitor: ${msg}"
-  local form="type=private&to=%5B${OWNER_ZULIP_ID}%5D&content=$(python3 -c "import urllib.parse; print(urllib.parse.quote('''${content}'''))")"
+  local form
+  form="type=private&to=%5B${OWNER_ZULIP_ID}%5D&content=$(python3 -c "import urllib.parse; print(urllib.parse.quote('''${content}'''))")"
   curl -sf -X POST "${ZULIP_SITE}/api/v1/messages" \
     -u "${ZULIP_EMAIL}:${ZULIP_KEY}" \
     -d "${form}" > /dev/null 2>&1 || true
@@ -29,14 +33,17 @@ notify() {
   local stream_content="${severity} Zulip Monitor: ${msg}"
   curl -sf -X POST "${ZULIP_SITE}/api/v1/messages" \
     -u "${ZULIP_EMAIL}:${ZULIP_KEY}" \
-    -d "type=stream\&to=%5B7%5D\&topic=zulip-health\&content=$(python3 -c "import urllib.parse; print(urllib.parse.quote(str()))")" \
-    > /dev/null 2>&1 || true
+    -d "type=stream&to=%5B7%5D&topic=zulip-health&content=$(printf '%s' "${stream_content}" | python3 -c "import sys,urllib.parse; print(urllib.parse.quote_from_bytes(sys.stdin.buffer.read()))")" \
+    > /dev/null 2>&1 \
+    || echo "  WARN: stream alert to #agent-hub (zulip-health) delivery failed (curl exit $?)" >> "$LOG"
 }
 
 # ── Global: Zulip Server ──
 SERVER_CODE=$(curl -s -o /dev/null -w "%{http_code}" --connect-timeout 10 \
   https://chat.sysloggh.net/api/v1/server_settings \
-  -u 'abiba-bot@chat.sysloggh.net:cKTDMZAPW08dk3zl05sStzO7HRztzyn8' 2>/dev/null || echo "000")
+  -u 'abiba-bot@chat.sysloggh.net:cKTDMZAPW08dk3zl05sStzO7HRztzyn8' 2>/dev/null) || SERVER_CODE="000"
+SERVER_CODE=$(printf '%s' "$SERVER_CODE" | tr -d '[:space:]')
+[ -n "$SERVER_CODE" ] || SERVER_CODE="000"
 if [ "$SERVER_CODE" != "200" ]; then
   notify "🔴" "Zulip server returned HTTP $SERVER_CODE"
   ISSUES=$((ISSUES + 1))
@@ -45,26 +52,71 @@ else
 fi
 
 # ── Platform A: pi (Abiba) ──
-PI_HEALTH=$(curl -sf --connect-timeout 5 http://localhost:9200/health 2>/dev/null || echo "{}")
-PI_CONNECTED=$(echo "$PI_HEALTH" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('connected',False))" 2>/dev/null)
-PI_ERROR=$(echo "$PI_HEALTH" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('last_error') or '')" 2>/dev/null)
-PI_RETRIES=$(echo "$PI_HEALTH" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('retry_count',0))" 2>/dev/null)
+# Probes the pi Zulip extension health endpoint (:9200/health, served by the
+# extension's startHealthServer; shape documented in zulip-health.prose.md).
+# FAIL-SAFE contract (pinned by tests/zulip-monitor-abiba.sh): connection state
+# lives NESTED at zulip.connected / zulip.last_error — there is no top-level
+# `connected` and no retry counter in the payload. A fetch error, non-2xx
+# response, empty/unparseable body, or payload missing a boolean
+# zulip.connected is a PROBE FAILURE: it alerts and NEVER calls pm2 restart.
+# pm2 restart runs ONLY on affirmative zulip.connected=false.
+# -- abiba-leg-start (verbatim-extracted by tests/zulip-monitor-abiba.sh)
+PI_HTTP=$(curl -s -o /dev/null --connect-timeout 5 --max-time 10 -w '%{http_code}' http://localhost:9200/health 2>/dev/null) || PI_HTTP="000"
+PI_HTTP=$(printf '%s' "$PI_HTTP" | tr -d '[:space:]')
+[ -n "$PI_HTTP" ] || PI_HTTP="000"
+PI_BODY=$(curl -s --connect-timeout 5 --max-time 10 http://localhost:9200/health 2>/dev/null || true)
+PI_STATE=$(printf '%s' "$PI_BODY" | python3 -c '
+import sys, json
+code = sys.argv[1]
+body = sys.stdin.read()
+try:
+    d = json.loads(body)
+except Exception:
+    sys.stdout.write("probe-failed|unparseable body")
+    sys.exit(0)
+if not code.startswith("2"):
+    sys.stdout.write("probe-failed|HTTP %s" % code)
+    sys.exit(0)
+if not isinstance(d, dict) or not isinstance(d.get("zulip"), dict):
+    sys.stdout.write("probe-failed|missing zulip.connected")
+    sys.exit(0)
+z = d["zulip"]
+if "connected" not in z or not isinstance(z["connected"], bool):
+    sys.stdout.write("probe-failed|missing or non-boolean zulip.connected")
+    sys.exit(0)
+err = z.get("last_error") or ""
+if z["connected"]:
+    if err:
+        sys.stdout.write("degraded|%s" % err)
+    else:
+        sys.stdout.write("healthy|%s" % z.get("messages_processed", 0))
+else:
+    sys.stdout.write("disconnected|")
+' "$PI_HTTP" 2>/dev/null) || PI_STATE="probe-failed|python error"
+PI_VERDICT=${PI_STATE%%|*}
+PI_DETAIL=${PI_STATE#*|}
 
-if [ "$PI_CONNECTED" != "True" ]; then
-  notify "🔴" "Abiba pi extension DISCONNECTED — restarting"
-  pm2 restart abiba-zulip 2>/dev/null || true
-  ISSUES=$((ISSUES + 1))
-  echo "  Abiba: ❌ Disconnected — restarted" >> "$LOG"
-elif [ -n "$PI_ERROR" ]; then
-  notify "🟡" "Abiba pi extension error: ${PI_ERROR:0:100}"
-  echo "  Abiba: 🟡 Error: ${PI_ERROR:0:100}" >> "$LOG"
-elif [ "$PI_RETRIES" -ge 3 ]; then
-  notify "🟡" "Abiba pi extension: $PI_RETRIES retries — restarting"
-  pm2 restart abiba-zulip 2>/dev/null || true
-  echo "  Abiba: 🟡 $PI_RETRIES retries — restarted" >> "$LOG"
-else
-  echo "  Abiba: ✅ Connected (processed=$(echo "$PI_HEALTH" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('messages_processed',0))" 2>/dev/null))" >> "$LOG"
-fi
+case "$PI_VERDICT" in
+  healthy)
+    echo "  Abiba: ✅ Connected (processed=$PI_DETAIL)" >> "$LOG" ;;
+  degraded)
+    notify "🟡" "Abiba pi extension error: ${PI_DETAIL:0:100}"
+    echo "  Abiba: 🟡 Error: ${PI_DETAIL:0:100}" >> "$LOG" ;;
+  disconnected)
+    notify "🔴" "Abiba pi extension DISCONNECTED — restarting"
+    pm2 restart abiba-zulip 2>/dev/null || true
+    ISSUES=$((ISSUES + 1))
+    echo "  Abiba: ❌ Disconnected — restarted" >> "$LOG" ;;
+  probe-failed)
+    notify "🟠" "Abiba pi extension health probe FAILED (${PI_DETAIL}; HTTP $PI_HTTP) — NOT restarting, manual check needed"
+    ISSUES=$((ISSUES + 1))
+    echo "  Abiba: ⚠️ Probe failed (${PI_DETAIL}; HTTP $PI_HTTP) — NOT restarted" >> "$LOG" ;;
+  *)
+    notify "🟠" "Abiba pi extension health probe returned unexpected verdict (${PI_STATE}) — NOT restarting, manual check needed"
+    ISSUES=$((ISSUES + 1))
+    echo "  Abiba: ⚠️ Unexpected probe verdict (${PI_STATE}) — NOT restarted" >> "$LOG" ;;
+esac
+# -- abiba-leg-end
 
 # ── Platform B: Tanko (DSH dsh-web on amdpve CT 112) ──
 # Direct SSH to 192.168.68.122 is not a dependency of this monitor — per-worker
@@ -97,50 +149,34 @@ else
   esac
 fi
 
-# ── Platform B: Hermes (Mumuni) ──
-MUMUNI_STATE=$(ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@192.168.68.24 \
-  "cat ~/.hermes/gateway_state.json 2>/dev/null" 2>/dev/null || echo "{}")
-MUMUNI_ZULIP=$(echo "$MUMUNI_STATE" | python3 -c "
-import sys,json
-d=json.load(sys.stdin)
-p=d.get('platforms',{}).get('zulip',{})
-print(p.get('state','unknown'))
-" 2>/dev/null)
-
-if [ "$MUMUNI_ZULIP" != "connected" ]; then
-  notify "🔴" "Mumuni (Hermes) Zulip state: $MUMUNI_ZULIP"
-  ISSUES=$((ISSUES + 1))
-  echo "  Mumuni: ❌ state=$MUMUNI_ZULIP" >> "$LOG"
-else
-  echo "  Mumuni: ✅ Zulip connected" >> "$LOG"
-fi
+# ── Removed: the former "Platform B: Hermes" agent leg ──
+# Captain ruling 2026-09-10: that agent moved off this host onto her own
+# container (kagentz CT 105 on minipve, dedicated `hermes` user) and is now
+# monitored on her side — see the out-of-scope note in zulip-health.prose.md.
+# The old leg ssh'd to her former CT 100 deployment and read its Hermes gateway
+# state, which reported "unknown" on every run and posted a false 🔴 DM plus an
+# #agent-hub stream alert. Do NOT re-add a probe for her: this monitor must
+# never contact her former host.
 
 # ── Platform C: Agent Zero (kagentz) ──
-AZ_A2A=$(ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@192.168.68.14 \
-  "docker exec agent-zero curl -s --connect-timeout 5 http://127.0.0.1:8001/.well-known/agent.json 2>/dev/null" 2>/dev/null || echo "")
-AZ_ALIVE=$(echo "$AZ_A2A" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('name',''))" 2>/dev/null)
+AZ_A2A_CODE=$(ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@192.168.68.14 \
+  "docker exec agent-zero curl -s --connect-timeout 5 -o /dev/null -w '%{http_code}' http://127.0.0.1:80/a2a/ 2>/dev/null" 2>/dev/null) || AZ_A2A_CODE="000"
+AZ_A2A_CODE=$(printf '%s' "$AZ_A2A_CODE" | tr -d '[:space:]')
+[ -n "$AZ_A2A_CODE" ] || AZ_A2A_CODE="000"
 
-if [ "$AZ_ALIVE" != "kagentz" ]; then
-  notify "🔴" "kagentz A2A server DOWN — restarting"
-  ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@192.168.68.14 \
-    "docker exec agent-zero bash -c 'pkill -9 -f a2a_agent; sleep 1; cd /a0 && /opt/venv-a0/bin/python3 -u /a0/usr/a2a_agent.py > /tmp/a2a.log 2>&1 &'" 2>/dev/null || true
+if [ "$AZ_A2A_CODE" = "000" ]; then
+  notify "🔴" "kagentz A2A server DOWN (connection failed)"
   ISSUES=$((ISSUES + 1))
-  echo "  kagentz: ❌ A2A down — restarted" >> "$LOG"
+  echo "  kagentz: ❌ A2A down (HTTP 000)" >> "$LOG"
 else
-  echo "  kagentz: ✅ A2A alive" >> "$LOG"
-  
-  # Check adapter process
-  AZ_ADAPTER=$(ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@192.168.68.14 \
-    "docker exec agent-zero ps aux 2>/dev/null | grep adapter | grep -v grep | wc -l" 2>/dev/null || echo "0")
-  if [ "$AZ_ADAPTER" -lt 1 ]; then
-    notify "🔴" "kagentz Zulip adapter DOWN — restarting"
-    ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@192.168.68.14 \
-      "docker exec agent-zero bash -c 'cd /a0/usr/kagentz-zulip && ZULIP_SITE=https://chat.sysloggh.net ZULIP_EMAIL=kagentz-bot@chat.sysloggh.net ZULIP_API_KEY=E9q9PXJTxftPYBkb5pBDWupDO7KK21ty ZULIP_AGENT_NAME=kagentz A2A_URL=http://localhost:8001/a2a A2A_TOKEN=8zNgdOEXzYxjQvTl /opt/venv-a0/bin/python3 -u adapter.py > /tmp/zulip-adapter.log 2>&1 &'" 2>/dev/null || true
-    ISSUES=$((ISSUES + 1))
-    echo "  kagentz: ❌ Adapter down — restarted" >> "$LOG"
-  else
-    echo "  kagentz: ✅ Adapter running" >> "$LOG"
-  fi
+  case "$AZ_A2A_CODE" in
+    200|401)
+      echo "  kagentz: ✅ A2A alive (HTTP $AZ_A2A_CODE)" >> "$LOG" ;;
+    *)
+      notify "🟡" "kagentz A2A server answered HTTP $AZ_A2A_CODE — running, unexpected status"
+      ISSUES=$((ISSUES + 1))
+      echo "  kagentz: 🟡 A2A unexpected http=$AZ_A2A_CODE (running, warning)" >> "$LOG" ;;
+  esac
 fi
 
 # ── Summary ──

tests/fixtures/zulip-health-connected.json

@@ -0,0 +1,25 @@
+{
+    "status": "ok",
+    "platform": "pi",
+    "agent": "abiba",
+    "zulip": {
+        "connected": true,
+        "site": "https://chat.sysloggh.net",
+        "email": "abiba-bot@chat.sysloggh.net",
+        "queue_id": "ee7f8b6d-9d53-48a7-ad58-f6e999771001",
+        "bot_user_id": 21,
+        "messages_processed": 0,
+        "skipped": 0,
+        "last_error": null
+    },
+    "circuit_breaker": {
+        "state": "CLOSED",
+        "failures": 0,
+        "successes": 5,
+        "totalRequests": 5,
+        "failureRate": "0.000",
+        "openedAt": null
+    },
+    "workers": [],
+    "worker_count": 0
+}

tests/fixtures/zulip-health-disconnected.json

@@ -0,0 +1,25 @@
+{
+    "status": "down",
+    "platform": "pi",
+    "agent": "abiba",
+    "zulip": {
+        "connected": false,
+        "site": "https://chat.sysloggh.net",
+        "email": "abiba-bot@chat.sysloggh.net",
+        "queue_id": null,
+        "bot_user_id": null,
+        "messages_processed": 0,
+        "skipped": 0,
+        "last_error": "Zulip API error 401: queue registration failed"
+    },
+    "circuit_breaker": {
+        "state": "CLOSED",
+        "failures": 0,
+        "successes": 0,
+        "totalRequests": 0,
+        "failureRate": "0.000",
+        "openedAt": null
+    },
+    "workers": [],
+    "worker_count": 0
+}

tests/test_daily_infra_report.py

@@ -0,0 +1,138 @@
+"""
+Regression tests for daily-infra-report.py fixes (PR #64).
+
+Tests:
+(a) Asserts the nested zulip read feeds the agent-card fields
+(b) Asserts an unreachable pve_get renders labelled-unreachable, not "0/0"
+"""
+import json
+import subprocess
+import sys
+from pathlib import Path
+from unittest.mock import patch, MagicMock
+
+# Add scripts to path
+sys.path.insert(0, str(Path(__file__).parent.parent / "scripts"))
+import importlib.util
+
+def load_script():
+    """Load the daily-infra-report script as a module."""
+    script_path = Path(__file__).parent.parent / "scripts" / "daily-infra-report.py"
+    spec = importlib.util.spec_from_file_location("daily_infra_report", script_path)
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+def test_nested_zulip_read_feeds_agent_card():
+    """Test that Zulip state is read from the nested 'zulip' key and feeds agent-card fields."""
+    # Mock the http_get_body response with nested structure
+    mock_health_response = json.dumps({
+        "status": "ok",
+        "platform": "pi",
+        "agent": "abiba",
+        "zulip": {
+            "connected": True,
+            "queue_id": "test-queue-id",
+            "messages_processed": 42,
+            "skipped": 5,
+            "last_error": None
+        }
+    })
+    
+    # Import and patch
+    report_mod = load_script()
+    
+    with patch.object(report_mod, 'http_get_body', return_value=mock_health_response):
+        # Simulate the collect() function's Zulip section
+        zulip_health = json.loads(report_mod.http_get_body("http://localhost:9200/health"))
+        zulip_state = zulip_health.get("zulip", {})
+        
+        # Assert the nested key is read correctly
+        assert zulip_state.get("connected") == True, "Zulip connected should be True from nested key"
+        assert zulip_state.get("messages_processed") == 42, "messages_processed should be 42 from nested key"
+        assert zulip_state.get("queue_id") == "test-queue-id", "queue_id should be read from nested key"
+        
+        # Simulate the agent card field population
+        agent_card = {
+            "zulip_connected": zulip_state.get("connected", False),
+            "zulip_processed": zulip_state.get("messages_processed", 0),
+        }
+        
+        assert agent_card["zulip_connected"] == True, "Agent card should show Zulip connected"
+        assert agent_card["zulip_processed"] == 42, "Agent card should show 42 processed messages"
+
+
+def test_unreachable_pve_get_renders_labelled_unreachable():
+    """Test that an unreachable PVE API renders 'unreachable' instead of '0/0'."""
+    # Import and patch
+    report_mod = load_script()
+    
+    # Test pve_get returns None on error
+    with patch.object(report_mod.subprocess, 'run') as mock_run:
+        mock_run.return_value.returncode = 7  # Connection failure
+        result = report_mod.pve_get("/api2/json/nodes")
+        assert result is None, "pve_get should return None on connection failure"
+    
+    # Test the render logic
+    report = {
+        "nodes": {},
+        "node_count": 0,
+        "nodes_online": 0,
+        "pve_probe_status": "unreachable",
+        "total_vms": 0,
+        "running_vms": 0,
+    }
+    
+    # The render should show "unreachable" not "0/0"
+    pve_status_label = "unreachable" if report.get('pve_probe_status') == 'unreachable' else f"{report['nodes_online']}/{report['node_count']}"
+    
+    assert pve_status_label == "unreachable", "PVE status should show 'unreachable' when probe fails, not '0/0'"
+
+
+def test_unreachable_resources_renders_labelled_unreachable():
+    """Test that unreachable resources probe renders 'unreachable' instead of '0/0'."""
+    report_mod = load_script()
+    
+    # Test resources probe returns None
+    with patch.object(report_mod.subprocess, 'run') as mock_run:
+        mock_run.return_value.returncode = 7
+        result = report_mod.pve_get("/api2/json/cluster/resources")
+        assert result is None, "pve_get for resources should return None on connection failure"
+    
+    # Test the render logic
+    report = {
+        "resources_probe_status": "unreachable",
+        "total_vms": 0,
+        "running_vms": 0,
+    }
+    
+    resources_label = "unreachable" if report.get('resources_probe_status') == 'unreachable' else f"{report['running_vms']}/{report['total_vms']}"
+    
+    assert resources_label == "unreachable", "Resources status should show 'unreachable' when probe fails, not '0/0'"
+
+
+if __name__ == "__main__":
+    print("Running tests...")
+    try:
+        test_nested_zulip_read_feeds_agent_card()
+        print("✓ test_nested_zulip_read_feeds_agent_card passed")
+    except AssertionError as e:
+        print(f"✗ test_nested_zulip_read_feeds_agent_card failed: {e}")
+        sys.exit(1)
+    
+    try:
+        test_unreachable_pve_get_renders_labelled_unreachable()
+        print("✓ test_unreachable_pve_get_renders_labelled_unreachable passed")
+    except AssertionError as e:
+        print(f"✗ test_unreachable_pve_get_renders_labelled_unreachable failed: {e}")
+        sys.exit(1)
+    
+    try:
+        test_unreachable_resources_renders_labelled_unreachable()
+        print("✓ test_unreachable_resources_renders_labelled_unreachable passed")
+    except AssertionError as e:
+        print(f"✗ test_unreachable_resources_renders_labelled_unreachable failed: {e}")
+        sys.exit(1)
+    
+    print("All tests passed!")

tests/test_mumuni_monitor_removal.py

@@ -0,0 +1,376 @@
+"""Regression tests for the 2026-09-10 retirement of the Mumuni monitoring leg.
+
+WHY THIS FILE EXISTS: captain ruling 2026-09-10 — Mumuni moved off this host
+onto her own container (kagentz CT 105 on minipve, 192.168.68.14, dedicated
+`hermes` user) and is monitored from her side. The monitor nevertheless kept
+ssh'ing to root@192.168.68.24 for `~/.hermes/gateway_state.json` on the
+decommissioned deployment, read "unknown" on every run, and posted a false 🔴
+"Mumuni (Hermes) Zulip state: unknown" DM + #agent-hub stream alert to the
+captain. The daily infra digest published a matching `mumuni:unknown` row.
+
+CONTRACT UNDER TEST:
+  * `scripts/zulip-monitor.sh` carries NO Mumuni probe and NO 192.168.68.24
+    reference; it never ssh'es .24, and even on a failing run it emits no Mumuni
+    notify (stdout alert, Zulip payload, or log line).
+  * The Abiba (pi — the Zulip bridge), Tanko (DSH) and Agent Zero (kagentz) legs
+    still work: deleting the Mumuni leg must not have gutted the rest.
+  * `scripts/daily-infra-report.py` no longer probes .24 for a Hermes gateway
+    state and no longer emits a `mumuni` agent entry.
+  * `scripts/agent-health-check.py`'s AGENTS roster has no mumuni entry. This is
+    a pin, not a behavior change — verify the probe was already gone.
+  * `zulip-health.prose.md` retires the Mumuni-only steps and says explicitly
+    that Mumuni is not monitored from this host.
+
+HOW: behavioral execution plus one named deliverable-text contract. The sandbox
+copies the shipped monitor verbatim and rewrites only its LOG constant, then
+runs it with stub ssh/curl on PATH; the ssh stub records every host it is asked
+to reach, so "never probes .24" and "no Mumuni notify" are asserted from
+observed behavior. The daily digest is pinned by importing it and exercising
+collect() and build_html() directly. The single source-text assertion is the
+deliverable-text contract the captain acceptance names for the shipped monitor.
+
+Usage: python3 -m pytest tests/test_mumuni_monitor_removal.py
+"""
+from __future__ import annotations
+
+import importlib.util
+import os
+import pathlib
+import stat
+import subprocess
+
+import pytest
+
+ROOT = pathlib.Path(__file__).resolve().parents[1]
+ZULIP_MONITOR = ROOT / "scripts" / "zulip-monitor.sh"
+DAILY_REPORT = ROOT / "scripts" / "daily-infra-report.py"
+AHC = ROOT / "scripts" / "agent-health-check.py"
+HEALTH_CONTRACT = ROOT / "zulip-health.prose.md"
+CONNECTED_FIXTURE = ROOT / "tests" / "fixtures" / "zulip-health-connected.json"
+
+MUMUNI_IP = "192.168.68.24"       # Mumuni's old (decommissioned) deployment
+TANKO_VANTAGE = "192.168.68.15"   # amdpve — Tanko CT 112 via pct exec
+AGENT_ZERO_HOST = "192.168.68.14"  # kagentz host, Agent Zero docker
+
+
+# ── scripts/zulip-monitor.sh: deliverable-text contract ─────────────
+
+def test_zulip_monitor_deliverable_text_contract():
+    """Owned deliverable-text contract for scripts/zulip-monitor.sh.
+
+    Captain acceptance requires the shipped monitor to contain no Mumuni probe
+    identifier and no 192.168.68.24 literal. Behavioral proof that the monitor
+    never contacts that host and never emits a Mumuni notify lives in the
+    sandbox tests below; this only pins the named text contract.
+    """
+    text = ZULIP_MONITOR.read_text()
+    assert "mumuni" not in text.lower()
+    assert MUMUNI_IP not in text
+
+
+# ── scripts/zulip-monitor.sh: behavioral sandbox ─────────────────────
+
+SSH_STUB = r"""#!/usr/bin/env bash
+# Stub ssh: record the target host, then answer by host + remote command.
+printf '%s\n' "$*" >> "$RECORD_DIR/ssh.calls"
+host=""
+for a in "$@"; do
+  case "$a" in
+    *@192.168.*) host="${a##*@}" ;;
+  esac
+done
+printf '%s\n' "$host" >> "$RECORD_DIR/ssh.hosts"
+cmd="${*: -1}"
+case "$host" in
+  192.168.68.15)
+    case "$cmd" in
+      *"systemctl is-active"*) printf '%s' "$TANKO_SVC" ;;
+      *curl*)                  printf '%s' "$TANKO_HTTP" ;;
+    esac ;;
+  192.168.68.14)
+    case "$cmd" in
+      *"/a2a/"*) printf '%s' "$AZ_A2A_CODE"; exit "$AZ_A2A_EXIT" ;;
+    esac ;;
+  *)
+    printf 'UNEXPECTED-SSH-HOST %s\n' "$host" >> "$RECORD_DIR/unexpected-ssh" ;;
+esac
+exit 0
+"""
+
+CURL_STUB = r"""#!/usr/bin/env bash
+# Stub curl: serve the Abiba health fixture and the Zulip server 200, and
+# record every call (including notify) payloads.
+printf '%s\n' "$*" >> "$RECORD_DIR/curl.calls"
+case "$*" in
+  *:9200/health*)
+    case " $* " in
+      *" -w "*) printf '%s' "$PI_HTTP" ;;   # -w '%{http_code}' probe
+      *)        printf '%s' "$PI_BODY" ;;   # body probe
+    esac ;;
+  *server_settings*)
+    printf '%s' "$SERVER_HTTP" ;;
+esac
+exit 0
+"""
+
+
+def _write_exec(path: pathlib.Path, body: str) -> None:
+    path.write_text(body)
+    path.chmod(path.stat().st_mode
+               | stat.S_IXUSR | stat.S_IXGRP | stat.S_IXOTH)
+
+
+def _run_monitor(tmp_path, *, tanko_svc="active", tanko_http="200",
+                 az_a2a_code="401", az_a2a_exit=0):
+    """Run the shipped monitor in a sandbox; return (proc, record_dir, log_path).
+
+    Only the LOG constant is rewritten (to keep the run inside the worktree).
+    Everything else — legs, labels, notify logic — is the shipped script.
+    """
+    sandbox = tmp_path / "sandbox"
+    bindir = sandbox / "bin"
+    record = sandbox / "record"
+    bindir.mkdir(parents=True)
+    record.mkdir()
+
+    _write_exec(bindir / "ssh", SSH_STUB)
+    _write_exec(bindir / "curl", CURL_STUB)
+
+    source = ZULIP_MONITOR.read_text()
+    log_line = 'LOG="/root/zulip-health-monitor.log"'
+    assert log_line in source, "LOG constant moved — update the sandbox harness"
+    log_path = sandbox / "zulip-health-monitor.log"
+    script = sandbox / "zulip-monitor.sh"
+    script.write_text(source.replace(log_line, f'LOG="{log_path}"'))
+
+    env = dict(os.environ)
+    env.update({
+        "PATH": f"{bindir}:{env['PATH']}",
+        "RECORD_DIR": str(record),
+        "TANKO_SVC": tanko_svc,
+        "TANKO_HTTP": tanko_http,
+        "AZ_A2A_CODE": az_a2a_code,
+        "AZ_A2A_EXIT": str(az_a2a_exit),
+        "PI_HTTP": "200",
+        "PI_BODY": CONNECTED_FIXTURE.read_text(),
+        "SERVER_HTTP": "200",
+    })
+    proc = subprocess.run(["bash", str(script)], cwd=sandbox, env=env,
+                          capture_output=True, text=True)
+    return proc, record, log_path
+
+
+def test_healthy_run_is_quiet_and_never_reaches_mumuni(tmp_path):
+    proc, record, log_path = _run_monitor(tmp_path)
+    assert proc.returncode == 0, proc.stderr
+    log = log_path.read_text()
+
+    # Every retained leg actually ran and passed.
+    assert "Server: ✅ HTTP 200" in log
+    assert "Abiba: ✅ Connected" in log
+    assert "Tanko: ✅ service=active http=200" in log
+    assert "kagentz: ✅ A2A alive (HTTP 401)" in log
+    assert "Result: ✅ All healthy" in log
+
+    # A healthy run emits no notify at all — and certainly no Mumuni one.
+    assert proc.stdout == ""
+    assert "Mumuni" not in log
+    assert "🔴" not in log
+
+    # Observed behavior: .24 is never resolved, only Tanko's vantage and the
+    # Agent Zero host are contacted.
+    hosts = record.joinpath("ssh.hosts").read_text().split()
+    assert MUMUNI_IP not in hosts
+    assert set(hosts) == {TANKO_VANTAGE, AGENT_ZERO_HOST}
+    assert not record.joinpath("unexpected-ssh").exists()
+
+
+def test_failing_run_alerts_on_tanko_but_never_on_mumuni(tmp_path):
+    # Failure path: exercises notify() end to end so "no Mumuni notify" is
+    # proven on the alert path, not only on the quiet healthy path.
+    proc, record, log_path = _run_monitor(tmp_path, tanko_svc="inactive",
+                                          tanko_http="000")
+    assert proc.returncode == 0, proc.stderr
+
+    alerts = proc.stdout
+    assert "Tanko (DSH dsh-web) service state: inactive" in alerts
+    assert "1 issue(s) found" in alerts
+
+    # No Mumuni text in stdout, the log, or any Zulip DM/stream payload.
+    assert "Mumuni" not in alerts
+    assert "Mumuni" not in log_path.read_text()
+    assert MUMUNI_IP not in alerts + log_path.read_text()
+    payloads = record.joinpath("curl.calls").read_text()
+    assert "Mumuni" not in payloads
+    assert MUMUNI_IP not in payloads
+
+    # The rest of the monitor still ran alongside the failing Tanko leg.
+    log = log_path.read_text()
+    assert "Abiba: ✅ Connected" in log
+    assert "kagentz: ✅ A2A alive" in log
+    assert "Result: 🔴 1 issue(s) found" in log
+
+
+def test_unexpected_a2a_status_is_an_issue_not_healthy(tmp_path):
+    proc, record, log_path = _run_monitor(tmp_path, az_a2a_code="500")
+    assert proc.returncode == 0, proc.stderr
+    log = log_path.read_text()
+
+    assert "kagentz: 🟡 A2A unexpected http=500 (running, warning)" in log
+    assert "kagentz: ✅ A2A alive" not in log
+    assert "Result: 🔴 1 issue(s) found" in log
+    assert "kagentz A2A server answered HTTP 500" in proc.stdout
+
+
+def test_a2a_connection_failure_is_down_not_unexpected(tmp_path):
+    # curl prints the http_code before failing, so the ssh stub exits non-zero
+    # with "000" on stdout — exercising the real outage path.
+    proc, record, log_path = _run_monitor(tmp_path, az_a2a_code="000",
+                                          az_a2a_exit=7)
+    assert proc.returncode == 0, proc.stderr
+    log = log_path.read_text()
+
+    assert "kagentz: ❌ A2A down (HTTP 000)" in log
+    assert "kagentz: ✅ A2A alive" not in log
+    assert "unexpected" not in log
+    assert "Result: 🔴 1 issue(s) found" in log
+    assert "kagentz A2A server DOWN (connection failed)" in proc.stdout
+
+
+# ── scripts/daily-infra-report.py: behavioral digest checks ──────────
+
+@pytest.fixture(scope="module")
+def daily():
+    spec = importlib.util.spec_from_file_location("daily_infra_report", DAILY_REPORT)
+    assert spec and spec.loader
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+DAILY_AGENTS = {
+    "abiba": {
+        "platform": "pi", "ct": 100, "ip": MUMUNI_IP,
+        "zulip_connected": True, "zulip_processed": 5,
+        "pm2_status": "online", "pm2_restarts": "0", "pm2_uptime": "1h",
+    },
+    "tanko": {
+        "platform": "dsh", "ct": 112, "ip": "192.168.68.122",
+        "gateway_state": "n/a (DSH)", "zulip_state": "connected",
+        "telegram_state": "unknown", "gateway_pid": None, "updated_at": "",
+    },
+}
+
+
+def _fabricated_report(agents):
+    return {
+        "nodes": {},
+        "node_count": 1,
+        "nodes_online": 1,
+        "total_vms": 0,
+        "running_vms": 0,
+        "stopped_vms": [],
+        "vms_by_node": {n: [] for n in
+                        ["amdpve", "minipve", "storepve", "acerpve", "ocupve"]},
+        "storage": [],
+        "docker_vm": {"total": 0, "running": 0, "unhealthy": [],
+                      "containers": [], "reclaimable": "", "disk_used": "1%"},
+        "docker_syslog": {"total": 0, "running": 0, "containers": []},
+        "docker_netbird": {"total": 0, "running": 0, "containers": []},
+        "endpoints": [],
+        "litellm": {"checks": []},
+        "nfs": [],
+        "zulip_ext": {
+            "connected": True, "queue_id": "queue", "last_error": None,
+            "messages_processed": 0, "retry_count": 0, "pm2": {},
+            "pm2_healthy": True, "bot_skipped_15min": 0, "finalized_1h": 0,
+            "failed_finalize_1h": 0, "finalize_fail_pct": 0,
+            "server_status": "200",
+        },
+        "agents": agents,
+    }
+
+
+def _agent_status_card(html):
+    start = html.index("🤖 Agent Status")
+    end = html.index("💬 Zulip Extension")
+    return html[start:end]
+
+
+def test_daily_report_renders_only_abiba_and_tanko_agents(daily):
+    """build_html() over a Mumuni-free agent set must render no Mumuni row and
+    no Mumuni gateway-unknown issue, while abiba and tanko rows still render."""
+    html = daily.build_html(_fabricated_report(dict(DAILY_AGENTS)))
+    card = _agent_status_card(html)
+    assert "mumuni" not in card.lower()
+    assert "abiba" in card
+    assert "tanko" in card
+    assert "mumuni" not in html.lower()
+
+
+def test_daily_report_collect_never_probes_mumuni(monkeypatch, daily):
+    """collect() with ssh stubbed must add no mumuni agent and must never ssh
+    its decommissioned .24 host."""
+    probed = []
+
+    class _NoSubprocess:
+        @staticmethod
+        def check_output(*args, **kwargs):
+            return b""
+
+    def fake_ssh(host, cmd):
+        probed.append(host)
+        return ""
+
+    monkeypatch.setattr(daily, "pve_get", lambda path: [])
+    monkeypatch.setattr(daily, "ssh_jerome", lambda host, cmd: "")
+    monkeypatch.setattr(daily, "ssh", fake_ssh)
+    monkeypatch.setattr(daily, "http_get",
+                        lambda url, auth=None, timeout=10: "200")
+    monkeypatch.setattr(daily, "http_get_body",
+                        lambda url, auth=None, timeout=10: "")
+    monkeypatch.setattr(daily, "count_in_log", lambda *a, **k: 0)
+    monkeypatch.setattr(daily, "subprocess", _NoSubprocess)
+
+    report = daily.collect()
+    assert "mumuni" not in report["agents"]
+    assert MUMUNI_IP not in probed
+
+
+# ── scripts/agent-health-check.py: roster pin ───────────────────────
+
+@pytest.fixture(scope="module")
+def ahc():
+    spec = importlib.util.spec_from_file_location("agent_health_check_roster", AHC)
+    assert spec and spec.loader
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+def test_agent_health_roster_has_no_mumuni_entry(ahc):
+    assert "mumuni" not in ahc.AGENTS
+
+
+# ── zulip-health.prose.md: contract reconciliation ──────────────────
+
+def test_health_contract_retires_mumuni_only_steps():
+    text = HEALTH_CONTRACT.read_text()
+    assert MUMUNI_IP not in text
+    for step in ("**B4: Gateway Process**", "**B5: Heartbeat Verification**",
+                 "**B6: Response Delivery**"):
+        assert step not in text
+
+
+def test_health_contract_states_mumuni_is_not_monitored_from_this_host():
+    text = HEALTH_CONTRACT.read_text()
+    assert "Mumuni is NOT monitored from this host" in text
+    assert "monitored on her side" in text
+    assert "her own container" in text
+
+
+def test_health_contract_keeps_tanko_agent_zero_and_bridge_steps():
+    text = HEALTH_CONTRACT.read_text()
+    for marker in ("**B1:", "**B2:", "**B3:", "Step 4: Platform C",
+                   "Step 2: Platform A", "Step 1: Zulip Server Liveness"):
+        assert marker in text, marker

tests/test_probe_drift.py

@@ -0,0 +1,466 @@
+"""Regression tests for the 2026-09-09/10 probe-drift corrections.
+
+WHY THIS FILE EXISTS: the monitoring contracts kept emitting false alarms from
+stale expectations rather than live faults.
+
+  * agent-health-check v3 reported 6 failures that were all stale expectations:
+    abiba (pi-only since the harness purge) was tested as a Hermes host, koby
+    (report-only per the captain's 2026-08-17 ruling) was counted as repairable,
+    koby's CT 111 was probed on amdpve where it does not exist (it runs on
+    storepve .6), and the wrapper infisical check had two bugs — it read only
+    the first 20 lines, so koonimo's wrapper (which references /usr/bin/infisical
+    past line 20) false-failed, and it treated koby's genuine no-infisical
+    (~/.hermes/.env) wrapper as broken.
+  * gpu-monitor emitted "DEGRADED — GPU-rtx3090 000, GPU-rtx5070 000" three
+    times from probing bare port 80 on GPU hosts while :8080 answered 200.
+  * infrastructure-monitoring probed CT 116 for the PVE API (no pveproxy ->
+    000) instead of the five real cluster nodes, which answer 401 = alive.
+
+These tests execute the health script (with SSH/vault stubbed) and the real
+provenance consumer (scripts/prose-lint.sh), and parse the contracts' executable
+check-health probe blocks into normalized probe sets. No live network, vault, or
+SSH access is required.
+"""
+from __future__ import annotations
+
+import importlib.util
+import json
+import os
+import pathlib
+import re
+import subprocess
+import sys
+import textwrap
+
+import pytest
+
+ROOT = pathlib.Path(__file__).resolve().parents[1]
+AHC = ROOT / "scripts" / "agent-health-check.py"
+LINT = ROOT / "scripts" / "prose-lint.sh"
+GPU = ROOT / "gpu-monitor.prose.md"
+INFRA = ROOT / "infrastructure-monitoring.prose.md"
+
+PVE_NODE_IPS = {
+    "192.168.68.9",
+    "192.168.68.5",
+    "192.168.68.15",
+    "192.168.68.6",
+    "192.168.68.12",
+}
+
+
+@pytest.fixture(scope="module")
+def ahc():
+    """Import agent-health-check.py without live network/SSH side effects."""
+    spec = importlib.util.spec_from_file_location("agent_health_check", AHC)
+    assert spec and spec.loader
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+# ── helpers: execute the health script with SSH/vault stubbed ─────────
+
+def _run_main(ahc, monkeypatch, capsys, argv, ssh_result=None):
+    ahc.FAIL.clear()
+    ahc.REPORT_ONLY.clear()
+    monkeypatch.setattr(ahc, "load_agent_keys", lambda: None)
+    monkeypatch.setattr(ahc, "ssh", lambda *a, **k: ssh_result)
+    monkeypatch.setattr(sys, "argv", ["agent-health-check.py", "--no-deploy", *argv])
+    with pytest.raises(SystemExit) as exc:
+        ahc.main()
+    return exc.value.code, capsys.readouterr().out
+
+
+def _json_payload(out):
+    for line in reversed(out.splitlines()):
+        if line.startswith('{"timestamp"'):
+            return json.loads(line)
+    raise AssertionError(f"no JSON payload in output:\n{out}")
+
+
+# ── agent-health-check: stale-expectation legs ───────────────────────
+
+def test_import_does_not_contact_vault(ahc):
+    # Keys are loaded in main() via load_agent_keys(); importing must stay inert.
+    assert callable(ahc.load_agent_keys)
+    assert all(agent.get("key") is None for agent in ahc.AGENTS.values())
+
+
+def test_abiba_is_pi_only_runtime(ahc):
+    # .24 has run pi-only since the harness purge: no Hermes gateway, config, or
+    # wrapper. Probing those legs produced false failures.
+    assert ahc.AGENTS["abiba"]["runtime"] == "pi"
+
+
+def test_koby_is_report_only(ahc):
+    # Captain's 2026-08-17 ruling (Rule 17): detect and report, never repair.
+    assert ahc.AGENTS["koby"]["report_only"] is True
+
+
+def test_koby_ct111_is_on_storepve(ahc):
+    # Live-verified 2026-09-10: `pct status 111` = running on storepve (.6);
+    # amdpve has no lxc/111.conf, which is what false-failed before.
+    assert ahc.AGENTS["koby"]["pve"] == "storepve"
+
+
+def test_report_only_legs_never_count_as_failures(ahc):
+    for agent, report_only in (("koby", True), ("koonimo", False), ("tanko", False)):
+        ahc.FAIL.clear()
+        ahc.REPORT_ONLY.clear()
+        ahc._fail(f"probe:{agent}", agent)
+        if report_only:
+            assert ahc.FAIL == []
+            assert ahc.REPORT_ONLY == [f"probe:{agent}"]
+        else:
+            assert ahc.FAIL == [f"probe:{agent}"]
+            assert ahc.REPORT_ONLY == []
+    ahc.FAIL.clear()
+    ahc.REPORT_ONLY.clear()
+
+
+def test_failure_recording_accepts_agentless_keys(ahc):
+    ahc.FAIL.clear()
+    try:
+        ahc._fail("gpu-no-port:gpu-rtx3090 (.8)")
+        assert ahc.FAIL == ["gpu-no-port:gpu-rtx3090 (.8)"]
+    finally:
+        ahc.FAIL.clear()
+
+
+def test_json_reports_absolute_execution_provenance(ahc, monkeypatch, capsys):
+    code, out = _run_main(ahc, monkeypatch, capsys, ["--json"])
+    payload = _json_payload(out)
+    assert payload["execution_path"] == os.path.abspath(str(AHC))
+    assert payload["cwd"] == os.getcwd()
+    assert code == 1  # stubbed SSH fails every leg, but provenance is still emitted
+
+
+def test_quiet_run_still_carries_provenance_on_the_alert_path(ahc, monkeypatch, capsys):
+    # The cron runs --quiet; a failure report must still carry provenance. The
+    # header line is suppressed in quiet mode, so the ALERT line is the carrier.
+    code, out = _run_main(ahc, monkeypatch, capsys, ["--quiet"])
+    assert code == 1
+    assert "📍 executed from:" not in out
+    alerts = [ln for ln in out.splitlines() if ln.startswith("ALERT agent-health:")]
+    assert alerts, out
+    assert f"script={os.path.abspath(str(AHC))}" in alerts[0]
+    assert f"cwd={os.getcwd()}" in alerts[0]
+
+
+def test_quiet_healthy_run_emits_no_stdout(ahc, monkeypatch, capsys):
+    # --quiet is documented as "only output on failure": a run with no fleet
+    # failures must produce no stdout at all (the production cron runs --quiet).
+    for name in ("check_keys", "check_gpu_ports", "check_agents", "check_ct_liveness",
+                 "check_config_integrity", "check_wrapper_integrity", "check_vault_secrets"):
+        monkeypatch.setattr(ahc, name, lambda: None)
+    code, out = _run_main(ahc, monkeypatch, capsys, ["--quiet"])
+    assert code == 0
+    assert out == ""
+
+
+def test_json_surfaces_report_only_findings_separately(ahc, monkeypatch, capsys):
+    # Koby's down legs are reported but must not count as fleet failures; the
+    # --json payload exposes them in their own array (item 1 + f8).
+    _, out = _run_main(ahc, monkeypatch, capsys, ["--json"])
+    payload = _json_payload(out)
+    assert isinstance(payload["report_only"], list)
+    assert any(key.startswith(("gateway-down:koby", "ct-unreachable:koby"))
+               for key in payload["report_only"])
+    assert not any("koby" in key for key in payload["failures"])
+
+
+# ── agent-health-check: wrapper infisical behavior (f3) ───────────────
+
+def _stub_wrapper_ssh(ahc, monkeypatch, wrapper_body, test_x_result="OK", command_v="/usr/local/bin/infisical"):
+    def fake_ssh(host, cmd, user="root"):
+        if cmd.startswith("cat /root/.local/bin/hermes"):
+            return wrapper_body
+        if cmd.startswith("ls -la /root/.local/bin/hermes "):
+            return "-rwxr-xr-x 1 root root 0 Jan 1 00:00 /root/.local/bin/hermes"
+        if cmd.startswith("ls -la /root/.local/bin/hermes-real") or "venv/bin/hermes" in cmd:
+            return "-rwxr-xr-x 1 root root 0 Jan 1 00:00 /root/.local/bin/hermes-real"
+        if cmd.startswith("grep -c 'LITELLM_API_KEY'"):
+            return "1"
+        if cmd.startswith("test -x "):
+            path = cmd[len("test -x "):].split()[0]
+            if isinstance(test_x_result, dict):
+                return test_x_result.get(path, "MISS")
+            return test_x_result
+        if cmd.startswith("command -v infisical"):
+            return command_v
+        return None
+
+    monkeypatch.setattr(ahc, "ssh", fake_ssh)
+    monkeypatch.setattr(ahc, "AGENTS", {"koonimo": dict(ahc.AGENTS["koonimo"])})
+    ahc.FAIL.clear()
+    ahc.REPORT_ONLY.clear()
+
+
+def test_env_based_wrapper_without_infisical_is_not_failed(ahc, monkeypatch, capsys):
+    _stub_wrapper_ssh(ahc, monkeypatch,
+                      "#!/bin/bash\nsource ~/.hermes/.env\nexec hermes-real \"$@\"\n")
+    ahc.check_wrapper_integrity()
+    out = capsys.readouterr().out
+    assert ahc.FAIL == []
+    assert "wrapper resolves creds without infisical" in out
+
+
+def test_dangling_absolute_infisical_path_is_failed(ahc, monkeypatch, capsys):
+    # Wrapper hardcodes /usr/bin/infisical, which is absent, while PATH resolves
+    # infisical to /usr/local/bin/infisical. The literal path must be verified,
+    # not inferred from PATH resolution.
+    _stub_wrapper_ssh(ahc, monkeypatch,
+                      "#!/bin/bash\n/usr/bin/infisical run -- hermes-real \"$@\"\n",
+                      test_x_result="MISS", command_v="/usr/local/bin/infisical")
+    ahc.check_wrapper_integrity()
+    assert "wrapper-infisical-path:koonimo" in ahc.FAIL
+
+
+def test_existing_absolute_infisical_path_passes(ahc, monkeypatch, capsys):
+    _stub_wrapper_ssh(ahc, monkeypatch,
+                      "#!/bin/bash\n/usr/bin/infisical run -- hermes-real \"$@\"\n",
+                      test_x_result="OK")
+    ahc.check_wrapper_integrity()
+    out = capsys.readouterr().out
+    assert ahc.FAIL == []
+    assert "wrapper infisical path OK" in out
+
+
+def test_comment_mentioning_removed_infisical_path_is_not_failed(ahc, monkeypatch, capsys):
+    # litellm-api-keys.prose.md documents `rm -f /usr/local/bin/infisical`; a
+    # wrapper comment about that migration must not manufacture a dangling path
+    # when the real invocation (/usr/bin/infisical) is present and executable.
+    _stub_wrapper_ssh(ahc, monkeypatch,
+                      "#!/bin/bash\n# migrated from /usr/local/bin/infisical\n"
+                      "exec /usr/bin/infisical run -- hermes-real \"$@\"\n",
+                      test_x_result={"/usr/bin/infisical": "OK",
+                                     "/usr/local/bin/infisical": "MISS"})
+    ahc.check_wrapper_integrity()
+    out = capsys.readouterr().out
+    assert ahc.FAIL == []
+    assert "wrapper infisical path OK" in out
+
+
+def test_comment_only_infisical_mention_does_not_reach_path_check(ahc, monkeypatch, capsys):
+    # A comment-only mention of a removed infisical path on a healthy .env-based
+    # wrapper is not an invocation: it must not fall through to the `command -v`
+    # PATH check and false-FAIL `wrapper-no-infisical`.
+    _stub_wrapper_ssh(ahc, monkeypatch,
+                      "#!/bin/bash\n# migrated from /usr/local/bin/infisical\n"
+                      "source ~/.hermes/.env\nexec hermes-real \"$@\"\n",
+                      test_x_result="MISS", command_v=None)
+    ahc.check_wrapper_integrity()
+    out = capsys.readouterr().out
+    assert ahc.FAIL == []
+    assert "wrapper resolves creds without infisical" in out
+
+
+# ── item 4: prose-lint enforces report provenance (real consumer) ─────
+
+GOOD_CONTRACT = textwrap.dedent("""\
+    ---
+    kind: function
+    name: good
+    description: fixture with provenance
+    ---
+
+    ## Parameters
+
+    - x: y
+
+    ## Returns
+
+    ok
+
+    ### check-health
+
+    ```bash
+    pwd -P
+    ```
+
+    **Report format**: Begin with the absolute path the probe executed from.
+    """)
+
+DECOY_CONTRACT = textwrap.dedent("""\
+    ---
+    kind: function
+    name: decoy
+    description: fixture with provenance only outside the report format
+    ---
+
+    ## Parameters
+
+    - x: y
+
+    ## Returns
+
+    ok
+
+    The absolute path of the config is /etc/foo.
+
+    ### check-health
+
+    ```bash
+    true
+    ```
+
+    **Report format**: Summarize actual results from each probe.
+    """)
+
+MISSING_CONTRACT = textwrap.dedent("""\
+    ---
+    kind: function
+    name: missing
+    description: check-health contract with no report format
+    ---
+
+    ## Parameters
+
+    - x: y
+
+    ## Returns
+
+    ok
+
+    ### check-health
+
+    ```bash
+    pwd -P
+    ```
+    """)
+
+
+def _run_lint(tmp_path, text, name):
+    (tmp_path / name).write_text(text)
+    return subprocess.run(["bash", str(LINT)], cwd=tmp_path,
+                          capture_output=True, text=True)
+
+
+def test_prose_lint_accepts_report_format_with_provenance(tmp_path):
+    result = _run_lint(tmp_path, GOOD_CONTRACT, "good.prose.md")
+    assert result.returncode == 0, result.stdout + result.stderr
+
+
+def test_prose_lint_rejects_report_format_without_provenance(tmp_path):
+    result = _run_lint(tmp_path, DECOY_CONTRACT, "decoy.prose.md")
+    assert result.returncode == 1, result.stdout
+    assert "lacks execution provenance" in result.stdout
+
+
+def test_prose_lint_requires_report_format_on_check_health_contract(tmp_path):
+    result = _run_lint(tmp_path, MISSING_CONTRACT, "missing.prose.md")
+    assert result.returncode == 1, result.stdout
+    assert "no **Report format** paragraph" in result.stdout
+
+
+# ── contracts: parse the executable check-health probe block ─────────
+
+def _check_health_block(contract):
+    """Extract the bash probe block under ### check-health (the probe interface)."""
+    text = contract.read_text()
+    marker = "### check-health"
+    assert marker in text, f"{contract.name} has no {marker}"
+    after = text.split(marker, 1)[1]
+    match = re.search(r"```bash\n(.*?)```", after, re.S)
+    assert match, f"{contract.name} check-health has no bash probe block"
+    return match.group(1)
+
+
+def _loop_nodes(block):
+    nodes = []
+    for line in block.splitlines():
+        match = re.match(r"\s*for\s+\w+\s+in\s+(.+?);?\s*do\b", line)
+        if match:
+            nodes = match.group(1).split()
+    return nodes
+
+
+def _record(url):
+    """Normalize a URL into a probe record: host, port, path, expected status."""
+    match = re.match(r"https?://([^/\s\"')]+)(/[^\s\"')]*)?", url)
+    assert match, f"unparseable probe URL: {url}"
+    hostport = match.group(1)
+    if "@" in hostport:
+        hostport = hostport.split("@", 1)[1]
+    if hostport.startswith("["):
+        host, port = hostport[1:hostport.index("]")], None
+    elif ":" in hostport:
+        host, raw_port = hostport.rsplit(":", 1)
+        port = int(raw_port) if raw_port.isdigit() else None
+    else:
+        host, port = hostport, None
+    return {"host": host, "port": port, "path": match.group(2) or "/",
+            "expected": None}
+
+
+def _probes(block):
+    """Parse the executable check-health bash block into a normalized probe model.
+
+    Comments are not probes; an `# Expected: <status>` comment annotates the
+    preceding probe. URLs using the block's shell-loop variable `$node` are
+    expanded over the loop's node list.
+    """
+    loop_nodes = _loop_nodes(block)
+    probes = []
+    last = None
+    for raw in block.splitlines():
+        stripped = raw.strip()
+        if stripped.startswith("#"):
+            expected = re.search(r"Expected:\s*(\d{3})", stripped, re.I)
+            if expected and last is not None:
+                last["expected"] = int(expected.group(1))
+            continue
+        for url in re.findall(r"https?://[^\s\"')]+", raw):
+            hosts = loop_nodes if "$node" in url else [None]
+            for node in hosts:
+                record = _record(url.replace("$node", node) if node else url)
+                probes.append(record)
+                last = record
+    return probes
+
+
+def test_gpu_monitor_probes_every_gpu_health_on_8080():
+    probes = _probes(_check_health_block(GPU))
+    targets = {(p["host"], p["port"], p["path"]) for p in probes}
+    assert ("192.168.68.8", 8080, "/health") in targets
+    assert ("192.168.68.110", 8080, "/health") in targets
+
+
+def test_gpu_monitor_never_probes_bare_port_80_on_gpu_hosts():
+    probes = _probes(_check_health_block(GPU))
+    gpu_hosts = {"192.168.68.8", "192.168.68.110", "192.168.68.15"}
+    offenders = [p for p in probes
+                 if p["host"] in gpu_hosts and p["port"] in (None, 80)]
+    assert offenders == []
+
+
+def test_probe_model_flags_explicit_port_80_on_gpu_host():
+    # Regression: a bare-port probe may be spelled with an explicit :80.
+    block = ("curl -s -o /dev/null -w '%{http_code}' "
+             "http://192.168.68.8:80/health\n")
+    gpu_hosts = {"192.168.68.8", "192.168.68.110", "192.168.68.15"}
+    offenders = [p for p in _probes(block)
+                 if p["host"] in gpu_hosts and p["port"] in (None, 80)]
+    assert offenders and offenders[0]["port"] == 80
+
+
+def test_gpu_monitor_treats_router_301_as_alive():
+    probes = _probes(_check_health_block(GPU))
+    unified = [p for p in probes
+               if p["host"] == "192.168.68.116" and p["path"] == "/health/unified"]
+    assert unified, "router /health/unified probe missing"
+    assert unified[0]["expected"] == 301
+
+
+def test_infra_monitoring_probes_every_real_pve_node():
+    probes = _probes(_check_health_block(INFRA))
+    pve = {(p["host"], p["port"], p["path"]) for p in probes if p["port"] == 8006}
+    assert {host for host, _, _ in pve} == PVE_NODE_IPS
+    assert {path for _, _, path in pve} == {"/api2/json/version"}
+
+
+def test_infra_monitoring_does_not_probe_ct116_for_pve_api():
+    probes = _probes(_check_health_block(INFRA))
+    assert not any(p["host"] == "192.168.68.116" and p["port"] == 8006
+                   for p in probes)

tests/zulip-monitor-abiba.sh

@@ -0,0 +1,211 @@
+#!/bin/bash
+# tests/zulip-monitor-abiba.sh — regression test pinning the producer→consumer
+# contract between the pi Zulip extension's :9200/health payload and the Abiba
+# leg of scripts/zulip-monitor.sh.
+#
+# WHY THIS TEST EXISTS: 2026-09-09 live incident. The monitor parsed the health
+# payload at the WRONG nesting level (d.get('connected') at top level, while the
+# extension serves zulip.connected) so PI_CONNECTED was always False and every
+# monitor run restarted a healthy bot: pm2 showed restarts=8 with the process
+# created 2026-09-09T09:35:09Z, the monitor log recorded four ❌ Abiba verdicts
+# (04:23, 05:35, 06:55, 09:35 UTC) and zero ✅, while the Zulip server answered
+# HTTP 200 and the bot logged a clean connect plus continuing heartbeats. The
+# watchdog was the fault, not the connection. This test makes that class of
+# regression fail loudly instead of silently restarting healthy services.
+#
+# CONTRACT UNDER TEST (must hold for scripts/zulip-monitor.sh):
+#   * Connection state is NESTED: zulip.connected (boolean) and zulip.last_error
+#     live inside the `zulip` object. There is NO top-level `connected` and NO
+#     retry counter anywhere in the payload (verified against the extension's
+#     startHealthServer handler) — the old retry_count branch was dropped.
+#   * zulip.connected=true                  -> log "✅ Connected", NO pm2 restart.
+#   * zulip.connected=false                 -> alert, pm2 restart abiba-zulip.
+#   * fetch error / non-2xx / empty body / unparseable body / missing or
+#     non-boolean zulip.connected           -> "⚠️ Probe failed" alert with a
+#     "NOT restarting" label, NO pm2 restart. A parse miss must never kill a
+#     healthy service.
+#   * zulip.connected=true with last_error  -> degraded 🟡 warning, no restart.
+#
+# HOW: the Abiba leg of the shipped script sits between the
+# `# -- abiba-leg-start` / `# -- abiba-leg-end` marker comments. This runner
+# extracts that block verbatim and executes it with a stubbed curl (fixture body
+# + HTTP code), recorded notify()/pm2 shims, and a temp $LOG. If the markers
+# disappear (fix reverted or renamed) extraction yields nothing and the suite
+# fails — the bug cannot return silently.
+#
+# Usage: bash tests/zulip-monitor-abiba.sh [path/to/zulip-monitor.sh]
+# Exit 0 iff every check passes.
+#
+# shellcheck disable=SC2034,SC2329,SC1090
+# LOG/ISSUES and the notify/pm2/curl stubs below are consumed at runtime by
+# the leg extracted between the marker comments and `source`d in each case;
+# the static analyzer cannot see across that dynamic source, so it flags them.
+set -uo pipefail
+
+ROOT=$(cd "$(dirname "$0")/.." && pwd)
+SCRIPT=${1:-"$ROOT/scripts/zulip-monitor.sh"}
+FIXTURES="$ROOT/tests/fixtures"
+TMP=$(mktemp -d)
+trap 'rm -rf "$TMP"' EXIT
+
+PASS=0
+FAIL=0
+ok()  { PASS=$((PASS + 1)); printf '  \033[32m✔\033[0m %s\n' "$1"; }
+bad() { FAIL=$((FAIL + 1)); printf '  \033[31m✘\033[0m %s\n' "$1"; }
+
+echo "== tests/zulip-monitor-abiba.sh — Abiba leg vs :9200/health producer contract =="
+echo "target script: $SCRIPT"
+
+# --- structural guards -------------------------------------------------------
+if ! grep -q '^# -- abiba-leg-start' "$SCRIPT"; then
+  echo "✘ FATAL: $SCRIPT has no '# -- abiba-leg-start' marker — the fix has been reverted or renamed."
+  exit 1
+fi
+if ! grep -q '^# -- abiba-leg-end' "$SCRIPT"; then
+  echo "✘ FATAL: $SCRIPT has no '# -- abiba-leg-end' marker."
+  exit 1
+fi
+
+LEG="$TMP/leg.sh"
+awk '/^# -- abiba-leg-start/{f=1; next}
+     /^# -- abiba-leg-end/{f=0; next}
+     f' "$SCRIPT" > "$LEG"
+if [ ! -s "$LEG" ]; then
+  echo "✘ FATAL: extracted Abiba leg is empty."
+  exit 1
+fi
+echo "== structural =="
+if bash -n "$SCRIPT"; then ok "syntax: bash -n $SCRIPT"; else bad "syntax: bash -n $SCRIPT failed"; fi
+if bash -n "$LEG"; then ok "syntax: extracted leg parses (bash -n)"; else bad "syntax: extracted leg fails bash -n"; fi
+
+# --- per-case harness ---------------------------------------------------------
+CURRENT_NAME=""
+CURRENT_DIR=""
+
+# $1 case name, $2 http-code, $3 body (file path or literal)
+run_case() {
+  local name="$1" http="$2" body_src="$3" body
+  CURRENT_NAME="$name"
+  CURRENT_DIR=$(mktemp -d "$TMP/case.XXXXXX")
+  if [ -f "$body_src" ]; then
+    body=$(cat "$body_src")
+  else
+    body="$body_src"
+  fi
+  (
+    LOG="$CURRENT_DIR/log"; ISSUES=0
+    notify() { printf 'ALERT [%s] %s\n' "$1" "$2" >> "$CURRENT_DIR/alerts"; }
+    pm2()    { printf 'PM2 %s\n' "$*"    >> "$CURRENT_DIR/pm2"; }
+    curl() {
+      local url=""
+      for a in "$@"; do case "$a" in http*) url="$a";; esac; done
+      case "$url" in
+        *:9200/health*)
+          case " $* " in
+            *"-w"*) printf '%s' "$http" ;;   # -w '%{http_code}' code probe
+            *)      printf '%s' "$body"  ;;   # body probe
+          esac ;;
+        *)
+          printf 'UNEXPECTED-CURL %s\n' "$*" >> "$CURRENT_DIR/unexpected-curl"
+          return 7 ;;
+      esac
+      return 0
+    }
+    source "$LEG"
+  )
+}
+
+assert_log_has() {
+  if grep -qF -- "$1" "$CURRENT_DIR/log"; then ok "$CURRENT_NAME — log has: $1"; else bad "$CURRENT_NAME — log MISSING: $1"; fi
+}
+assert_log_lacks() {
+  if grep -qF -- "$1" "$CURRENT_DIR/log"; then bad "$CURRENT_NAME — log must NOT contain: $1"; else ok "$CURRENT_NAME — log correctly lacks: $1"; fi
+}
+assert_alert_has() {
+  if grep -qF -- "$1" "$CURRENT_DIR/alerts"; then ok "$CURRENT_NAME — alert sent: $1"; else bad "$CURRENT_NAME — alert MISSING: $1"; fi
+}
+assert_alert_empty() {
+  if [ ! -s "$CURRENT_DIR/alerts" ]; then ok "$CURRENT_NAME — no alert sent (quiet healthy path)"; else bad "$CURRENT_NAME — unexpected alert: $(cat "$CURRENT_DIR/alerts")"; fi
+}
+assert_pm2_restarted() {
+  if grep -qF "PM2 restart abiba-zulip" "$CURRENT_DIR/pm2"; then ok "$CURRENT_NAME — pm2 restart abiba-zulip was called"; else bad "$CURRENT_NAME — expected pm2 restart abiba-zulip, pm2 log: $(cat "$CURRENT_DIR/pm2" 2>/dev/null)"; fi
+}
+assert_no_restart() {
+  if [ ! -s "$CURRENT_DIR/pm2" ]; then ok "$CURRENT_NAME — NO pm2 restart (fail-safe holds)"; else bad "$CURRENT_NAME — pm2 was called but must NOT be: $(cat "$CURRENT_DIR/pm2")"; fi
+}
+assert_no_unexpected_curl() {
+  if [ ! -s "$CURRENT_DIR/unexpected-curl" ]; then ok "$CURRENT_NAME — only :9200/health was probed"; else bad "$CURRENT_NAME — unexpected curl: $(cat "$CURRENT_DIR/unexpected-curl")"; fi
+}
+
+# --- case 1: real payload shape, zulip.connected=true -> healthy, no restart --
+echo "== case 1: connected (real producer payload: nested zulip.connected=true) =="
+run_case "connected" 200 "$FIXTURES/zulip-health-connected.json"
+assert_log_has "Abiba: ✅ Connected (processed=0)"
+assert_log_lacks "Disconnected"
+assert_alert_empty
+assert_no_restart
+assert_no_unexpected_curl
+
+# --- case 2: zulip.connected=false -> disconnected, restart -------------------
+echo "== case 2: disconnected (nested zulip.connected=false triggers restart) =="
+run_case "disconnected" 200 "$FIXTURES/zulip-health-disconnected.json"
+assert_log_has "Abiba: ❌ Disconnected — restarted"
+assert_alert_has "DISCONNECTED — restarting"
+assert_pm2_restarted
+assert_no_unexpected_curl
+
+# --- cases 3-9: probe failures must alert and MUST NOT restart ----------------
+echo "== probe-failure cases: alert 'NOT restarting', zero pm2 restarts =="
+
+run_case "empty body" 200 ""
+assert_log_has "Abiba: ⚠️ Probe failed"
+assert_log_lacks "❌ Disconnected"
+assert_alert_has "NOT restarting"
+assert_no_restart
+
+run_case "garbage body" 200 '{not valid json!!'
+assert_log_has "Abiba: ⚠️ Probe failed"
+assert_alert_has "NOT restarting"
+assert_no_restart
+
+run_case "missing zulip key" 200 '{"status":"ok","platform":"pi","agent":"abiba"}'
+assert_log_has "Probe failed"
+assert_alert_has "NOT restarting"
+assert_no_restart
+
+run_case "zulip without connected" 200 '{"status":"ok","zulip":{"last_error":null}}'
+assert_log_has "Probe failed"
+assert_alert_has "NOT restarting"
+assert_no_restart
+
+run_case "non-boolean connected" 200 '{"status":"ok","zulip":{"connected":"true"}}'
+assert_log_has "Probe failed"
+assert_alert_has "NOT restarting"
+assert_no_restart
+
+run_case "fetch failure http 000" 000 ""
+assert_log_has "Probe failed"
+assert_alert_has "NOT restarting"
+assert_no_restart
+
+run_case "non-2xx http 500" 500 '{"error":"boom"}'
+assert_log_has "Probe failed"
+assert_alert_has "NOT restarting"
+assert_no_restart
+
+# --- case 10: connected but last_error set -> degraded 🟡, no restart ---------
+echo "== case 10: degraded (connected=true but last_error set) warns, no restart =="
+run_case "degraded" 200 '{"status":"ok","zulip":{"connected":true,"last_error":"transient queue hiccup","messages_processed":3}}'
+assert_log_has "Abiba: 🟡 Error: transient queue hiccup"
+assert_log_lacks "❌ Disconnected"
+assert_no_restart
+
+# --- summary -------------------------------------------------------------------
+echo ""
+if [ "$FAIL" -eq 0 ]; then
+  echo "✅ ALL CHECKS PASSED ($PASS/$PASS) — tests/zulip-monitor-abiba.sh"
+  exit 0
+else
+  echo "❌ $FAIL CHECK(S) FAILED ($PASS passed) — tests/zulip-monitor-abiba.sh"
+  exit 1
+fi

zulip-health.prose.md

@@ -1,9 +1,9 @@
 ---
 kind: responsibility
 name: zulip-health
-description: Multi-platform health monitor for the Zulip messaging mesh spanning Platform A (Agent Zero Docker), Platform B (Tanko on DSH / Mumuni on Hermes), and the Zulip bridge. Verifies bot registration, DM delivery, and cross-platform connectivity.
+description: Multi-platform health monitor for the Zulip messaging mesh spanning Platform A (pi/Abiba Zulip bridge), Platform B (Tanko on DSH), and Platform C (Agent Zero Docker). Verifies bot registration, DM delivery, and cross-platform connectivity. The kagentz Zulip adapter leg is retired (its code no longer exists) — Agent Zero is probed for A2A liveness only. Mumuni is no longer monitored from this host — she runs on her own container (kagentz CT 105 on minipve, .14) and is monitored on her side.
 title: Zulip Mesh Health Monitor — Multi-Platform
-version: 3.0.0
+version: 3.3.0
 runtime_contract: 2
 agent: abiba
 report_only_agents:
@@ -12,13 +12,23 @@ report_only_agents:
 
 # Zulip Mesh Health Monitor
 
-Monitors ALL Zulip-connected agents across platforms (pi, Hermes, DSH, Agent Zero).
-Runs every 15 minutes in the background. Also triggers on session start.
+Monitors the Zulip-connected agents under this host's operational control (pi,
+DSH, Agent Zero). Runs every 15 minutes in the background. Also triggers on
+session start.
+
+> **Mumuni is NOT monitored from this host (captain ruling 2026-09-10).** She
+> moved off this host onto her own container — kagentz CT 105 on minipve
+> (192.168.68.14), running a dedicated `hermes` user — and is monitored on her
+> side. No step in this contract, and no leg of `scripts/zulip-monitor.sh`, may
+> ssh to her old deployment, read her `~/.hermes/gateway_state.json`, or alert on
+> her state. The former Platform-B-for-Mumuni steps (gateway process, heartbeat,
+> response delivery) are retired: they always read "unknown" against the
+> decommissioned deployment and produced a false 🔴 alert on every run.
 
 ## Requires
 
 - **Zulip API key** for `abiba-bot@chat.sysloggh.net` in `$ZULIP_API_KEY`
-- **SSH access** to amdpve (192.168.68.15) for Tanko — CT 112 reached via `pct exec` (direct SSH to .122 is not a dependency of this contract: per-worker key availability varies); Mumuni (192.168.68.14, kagentz CT105 on minipve); and Agent Zero Docker host (192.168.68.14)
+- **SSH access** to amdpve (192.168.68.15) for Tanko — CT 112 reached via `pct exec` (direct SSH to .122 is not a dependency of this contract: per-worker key availability varies); and the Agent Zero Docker host (192.168.68.14)
 - **PM2** on localhost for pi process management
 - **Network access** to `chat.sysloggh.net`, `localhost:9200`
 - **Write access** to `/root/zulip-health-monitor.log` and `/tmp/zulip-monitor-debounce`
@@ -81,13 +91,13 @@ Log as "unreachable" — don't treat as critical unless it persists for 3+ conse
 ## Streaming Support (2026-07-05)
 
 Zulip agents now support progressive message editing during agent generation.
-When a Zulip agent (Tanko on DSH, Mumuni on Hermes) processes a message, the response is
+When a Zulip agent under this monitor's scope (Tanko on DSH) processes a message, the response is
 streamed in real-time via Zulip's `PATCH /api/v1/messages/{id}` API:
 
 - Adapter implements `edit_message()` using `_api_patch()` helper
 - Gateway stream consumer progressively edits the Zulip message
 - User sees real-time agent thinking instead of waiting for full response
-- Verified: Tanko (CT 112) and Mumuni (kagentz CT 105) both have streaming active
+- Verified: Tanko (CT 112) has streaming active; Mumuni's (kagentz CT 105) is verified on her own host, not from here
 
 ### Verification
 ```bash
@@ -183,7 +193,10 @@ grep -a "Finalized\|Failed to finalize" /root/.pm2/logs/abiba-zulip-out.log | ta
 | Crash loop >10/h | Alert user |
 
 
-### Step 3: Platform B — Tanko (DSH on amdpve CT 112) & Mumuni (Hermes)
+### Step 3: Platform B — Tanko (DSH on amdpve CT 112)
+
+Mumuni is out of scope for this host (see the note above): she runs on her own
+container and is monitored on her side.
 
 Tanko runs on DSH (DeepSeek Harness) — it no longer runs a Hermes gateway, so
 there is no `~/.hermes/gateway_state.json` on CT 112. Tanko's Zulip gateway runs
@@ -240,77 +253,211 @@ timeout only. Never expect a bare `200` — the public URL terminates in the
 token-gated authentik chain. Statuses outside the healthy set are
 logged/reported as a warning — reported, never healed on.
 
-**B4: Gateway Process** (Hermes agent Mumuni only — Tanko runs no Hermes gateway)
-
-```bash
-ssh root@<CT> "ps aux | grep 'gateway run' | grep -v grep"
-```
-
-Gateway PID should exist with uptime > 60s. **Dual-gateway detection**: if more
-than one `gateway run` process is found, the gateway has a collision (typically
-one `--force` and one `--replace` process). Kill the newer/duplicate process,
-then restart the remaining gateway per-agent (parameterized 2026-08-09, captain
-ruling). Check the gateway log for "Gateway running with 2 platform(s)" (not 1)
-to confirm Zulip reloaded.
-
-**B5: Heartbeat Verification** (Hermes agent Mumuni only — Tanko has no Hermes gateway)
-
-```bash
-ssh root@192.168.68.24 "grep Heartbeat ~/.hermes/logs/agent.log | tail -3"
-```
-
-Expected: recent heartbeat (within 5 min), `polls=N` incrementing.
-Silence > 300s → warning. Silence > 600s → critical.
-
-**B6: Response Delivery** (Hermes agent Mumuni only)
-
-```bash
-ssh root@192.168.68.24 "grep -E 'Finalized|Failed to finalize|Replied to' ~/.hermes/logs/agent.log | tail -10"
-```
-
-> 50% fail rate → critical.
-
 **Platform B Actions**
 
 | Condition | Action |
 |-----------|--------|
-| `zulip.state != "connected"` | `ssh root@<CT> "pkill -f 'gateway run'; sleep 2; hermes gateway restart"` (Mumuni) / restart Tanko via DSH service |
-| No heartbeat in 10min | Same as above |
-| `Failed to finalize` > 50% | Check PATCH API, Zulip server |
-| Response empty/short | Check A2A endpoint / LiteLLM model |
+| `dsh-web` service not `active` | Restart Tanko via DSH service |
+| HTTP `:3080` connection refused/timeout (`000`) | Same as above |
+| HTTP status outside the expected set | Log/report as a warning — reported, never healed on |
+
+**B4: dsh-web Authentication (Tanko — restart-persistent login)**
+
+The dsh-web UI is token-gated. On every start the process prints a random
+launch token to the journal:
+
+```
+dsh web: http://127.0.0.1:3080/?token=<TOKEN>
+```
+
+The token only bootstraps an authority-bound, HMAC-signed browser cookie with a
+30-day lifetime. The signing secret is durable in
+`/root/.dsh/.credentials.yaml` (key `client-connection/browser-session`), so a
+cookie minted once keeps working across `dsh-web` restarts; the launch token
+itself rotates on every restart.
+
+**Login endpoint (public, Authentik-gated):**
+`https://tankodhs.sysloggh.net/dsh-web-login`
+
+It lives inside the Authentik-gated `:80` server block
+(`/etc/nginx/sites-available/dsh`, symlinked from
+`/etc/nginx/sites-enabled/dsh`) as `location = /dsh-web-login`, guarded by
+`auth_request /outpost.goauthentik.io/auth/nginx`. It proxies to dsh-web with
+`Host: tankodhs.sysloggh.net`, so the minted cookie is bound to the public
+authority — never to `127.0.0.1:3080`. The token-dependent line is isolated in
+the generated include `/etc/dsh-web/nginx-login.conf`:
+
+```
+proxy_pass http://127.0.0.1:3080/?token=<TOKEN>;
+```
+
+**Token refresh (non-disruptive):**
+`/opt/deepseek-harness/capture-dsh-token.sh` (source:
+`scripts/capture-dsh-token.sh`) reads candidate launch tokens from the journal
+**scoped to the service's current systemd invocation**
+(`systemctl show -p InvocationID` + `_SYSTEMD_INVOCATION_ID=`), re-sampling the
+invocation on every pass so a restart that lands during the wait switches to the
+new invocation; a restarted process's stale token is never considered while its
+new startup banner is still pending and there is no whole-journal or
+cross-invocation fallback. Each candidate
+is then functionally verified against dsh-web with `Host: tankodhs.sysloggh.net`,
+using the first the running process accepts with `303`. It waits up to 120s for
+a restarted process to accept a token and re-probes every current-invocation
+candidate on each pass, so a token that briefly returns `000` while the service
+is still starting is not disqualified. If none is accepted it leaves the include
+untouched and exits so the timer retries (exiting non-zero when a pending reload
+is still outstanding). It writes
+`/etc/dsh-web/launch-token` and regenerates `/etc/dsh-web/nginx-login.conf`,
+reloading nginx only when the on-disk include differs from the generated one or
+the applied-state stamp does not match the token (`nginx -t` guards the reload,
+and the stamp is written only after a successful `nginx -s reload`, so a failed
+or interrupted reload is retried on the next run). Any failed reload records a
+pending-reload marker under `/etc/dsh-web/`; the next run attempts the reload
+before the token wait, independent of token state, and clears the marker only
+once the reload succeeds, so a disabled legacy `:8081` file can never leave the
+running nginx unreloaded. The generated include is recreated before any
+`nginx -t` if it is missing, so a failed run cannot wedge recovery.
+Runs are serialized with `flock` on `/run/capture-dsh-token.lock`. It **never
+stops or starts `dsh-web`**.
+It is triggered by the `dsh-web.service` drop-in
+`/etc/systemd/system/dsh-web.service.d/20-token-refresh.conf`
+(`ExecStartPost=/bin/systemctl --no-block start dsh-web-token.service`) and by
+`dsh-web-token.timer` every 2 minutes for reconciliation.
+
+<details><summary>Installed systemd wiring (CT 112)</summary>
+
+```ini
+# /etc/systemd/system/dsh-web-token.service
+[Unit]
+Description=Refresh the dsh-web launch token for the nginx login endpoint
+After=dsh-web.service
+[Service]
+Type=oneshot
+TimeoutStartSec=180
+ExecStart=/opt/deepseek-harness/capture-dsh-token.sh
+
+# /etc/systemd/system/dsh-web-token.timer
+[Unit]
+Description=Periodically refresh the dsh-web login token
+[Timer]
+OnBootSec=90s
+OnUnitActiveSec=120s
+AccuracySec=10s
+Persistent=true
+[Install]
+WantedBy=timers.target
+
+# /etc/systemd/system/dsh-web.service.d/20-token-refresh.conf
+[Service]
+ExecStartPost=/bin/systemctl --no-block start dsh-web-token.service
+```
+
+</details>
+
+> **Do NOT reintroduce the `:8081` endpoint.** It listened on `0.0.0.0:8081`
+> with no `auth_request` and was a full Authentik bypass for anyone on the LAN.
+> The script now removes `/etc/nginx/sites-enabled/dsh.token` automatically if
+> it ever reappears.
+
+**Authentication flow:**
+1. `GET https://tankodhs.sysloggh.net/dsh-web-login`
+2. Unauthenticated → Authentik sign-in; once authenticated the request reaches
+   dsh-web with `Host: tankodhs.sysloggh.net`.
+3. dsh-web accepts the launch token on `GET /`, writes the
+   `dsh-auth-<authority-hash>` cookie (30 days, `HttpOnly`, `SameSite=Strict`)
+   and returns `303` to `/`.
+4. Every later request through `/` presents that cookie; the token is not needed
+   again until the cookie expires or a new browser is used.
+
+**Verification** (amdpve vantage):
+```bash
+# 1. Login endpoint is Authentik-gated: unauthenticated -> 302 (not 200/303).
+ssh root@192.168.68.15 "pct exec 112 -- curl -s -o /dev/null -w '%{http_code}\n' \
+  -H 'Host: tankodhs.sysloggh.net' http://127.0.0.1/dsh-web-login"
+# Expected: 302
+
+# 2. Legacy :8081 endpoint is gone (connection refused -> 000).
+ssh root@192.168.68.15 "pct exec 112 -- curl -s --max-time 3 -o /dev/null \
+  -w '%{http_code}\n' http://192.168.68.122:8081/"
+# Expected: 000
+
+# 3. Backend cookie mint + reuse (exactly what /dsh-web-login proxies to).
+TOKEN=$(ssh root@192.168.68.15 "pct exec 112 -- cat /etc/dsh-web/launch-token")
+ssh root@192.168.68.15 "pct exec 112 -- curl -s -c /tmp/dsh.jar -o /dev/null \
+  -H 'Host: tankodhs.sysloggh.net' 'http://127.0.0.1:3080/?token=$TOKEN'"
+ssh root@192.168.68.15 "pct exec 112 -- curl -s -b /tmp/dsh.jar -o /dev/null \
+  -w '%{http_code}\n' -H 'Host: tankodhs.sysloggh.net' http://127.0.0.1:3080/"
+# Expected: 200 — the minted dsh-auth-... cookie (authority
+# tankodhs.sysloggh.net) is replayed on the next request and accepted.
+
+# 4. Token refresh is non-disruptive and idempotent.
+ssh root@192.168.68.15 "pct exec 112 -- /opt/deepseek-harness/capture-dsh-token.sh"
+# Expected: "token unchanged; nginx not reloaded" when nothing changed
+```
+
+**Restart durability (acceptance):** after `systemctl restart dsh-web`, (a) the
+cookie minted before the restart still returns `200` on `/`, and (b) the
+refreshed `/etc/dsh-web/nginx-login.conf` carries the new token and mints a
+fresh cookie. Both verified live 2026-09-11.
+
+```bash
+# 5. Cookie survives a dsh-web restart, and the new token mints a new cookie.
+ssh root@192.168.68.15 "pct exec 112 -- systemctl restart dsh-web"
+# dsh-web is Type=simple: restart returns before :3080 is listening. Bounded-poll
+# until the socket answers (any status but 000) before asserting the cookie.
+for i in $(seq 1 60); do
+  UP=$(ssh root@192.168.68.15 "pct exec 112 -- curl -s -o /dev/null -w '%{http_code}' \
+    -H 'Host: tankodhs.sysloggh.net' http://127.0.0.1:3080/")
+  [ "$UP" != "000" ] && break
+  sleep 2
+done
+ssh root@192.168.68.15 "pct exec 112 -- curl -s -b /tmp/dsh.jar -o /dev/null \
+  -w '%{http_code}\n' -H 'Host: tankodhs.sysloggh.net' http://127.0.0.1:3080/"
+# Expected: 200 — the pre-restart cookie is still accepted.
+# The restart's ExecStartPost (or the 2-minute timer) refreshes the include. A
+# manual run may no-op on the flock, so poll until the include carries a token
+# the running process accepts (bounded wait) before the mint+reuse check.
+for i in $(seq 1 60); do
+  TOKEN=$(ssh root@192.168.68.15 "pct exec 112 -- sed -n 's/.*token=//p' /etc/dsh-web/nginx-login.conf | tr -d ';\n'")
+  CODE=$(ssh root@192.168.68.15 "pct exec 112 -- curl -s -o /dev/null -w '%{http_code}' \
+    -H 'Host: tankodhs.sysloggh.net' 'http://127.0.0.1:3080/?token=$TOKEN'")
+  [ "$CODE" = "303" ] && break
+  sleep 2
+done
+# Expected: 303 — the include now holds the token the running process accepts.
+ssh root@192.168.68.15 "pct exec 112 -- curl -s -c /tmp/dsh-new.jar -o /dev/null \
+  -H 'Host: tankodhs.sysloggh.net' 'http://127.0.0.1:3080/?token=$TOKEN'"
+ssh root@192.168.68.15 "pct exec 112 -- curl -s -b /tmp/dsh-new.jar -o /dev/null \
+  -w '%{http_code}\n' -H 'Host: tankodhs.sysloggh.net' http://127.0.0.1:3080/"
+# Expected: 200 — the refreshed token minted a fresh cookie.
+```
+
 
 ### Step 4: Platform C — Agent Zero (kagentz, CT 105 via Docker host .14)
 
+> **The kagentz Zulip adapter leg is retired (2026-09-12).** Its code
+> (`/a0/usr/kagentz-zulip/`) no longer exists in the agent-zero container, so
+> the former adapter-process and heartbeat/queue checks always failed and the
+> monitor issued a restart for something that could not start, posting a false
+> kagentz-adapter-down alert on every run. Do NOT re-add an adapter-process,
+> heartbeat/queue, or adapter-restart step. Agent Zero is probed for A2A
+> liveness only, and a probe must never restart a platform.
+
 **C1: A2A Server Health**
 
 ```bash
-# A2A server is on :50080 (not :8001) and is auth-gated (401 expected for unauthenticated)
-ssh root@192.168.68.14 "curl -s --connect-timeout 5 -o /dev/null -w '%{http_code}' http://127.0.0.1:50080/a2a/"
+# A2A listens on :80 inside the agent-zero container (host-mapped to :50080) and
+# is auth-gated: an unauthenticated probe gets 401, which means the server is up.
+ssh root@192.168.68.14 "docker exec agent-zero curl -s --connect-timeout 5 -o /dev/null -w '%{http_code}' http://127.0.0.1:80/a2a/"
 ```
 
-Expected: `401` (auth-gated, A2A server is up and responding) or `200` (if no auth required). Connection refused (000) → A2A server down.
+Expected: `401` (auth-gated, A2A server is up and responding) or `200` (if no auth required). Connection refused (`000`) → A2A server down. Any other status → running but unexpected: log/report it, never restart.
 
-**C2: Adapter Process**
+**C2: A2A Response Verification**
 
 ```bash
-ssh root@192.168.68.14 "docker exec agent-zero ps aux | grep adapter | grep -v grep"
-```
-
-Adapter should be running. Missing → restart inside container.
-
-**C3: Heartbeat & Queue**
-
-```bash
-ssh root@192.168.68.14 "docker exec agent-zero grep Heartbeat /tmp/zulip-adapter.log | tail -3"
-```
-
-Check: `processed=N` incrementing, `silence < 600s`, `reconnects` ≈ 0.
-
-**C4: A2A Response Verification**
-
-```bash
-# A2A server is on :50080 (not :8001) and is auth-gated (401 expected for unauthenticated)
-ssh root@192.168.68.14 "curl -s -X POST http://127.0.0.1:50080/a2a \
+# A2A listens on :80 inside the container and is auth-gated (401 expected unauthenticated).
+ssh root@192.168.68.14 "docker exec agent-zero curl -s -X POST http://127.0.0.1:80/a2a \
   -H 'Content-Type: application/json' \
   -H 'Authorization: Bearer $LITELLM_KEY' \
   -d '{\"jsonrpc\":\"2.0\",\"method\":\"tasks/send\",\"params\":{\"message\":{\"role\":\"user\",\"parts\":[{\"text\":\"ping\"}]}},\"id\":1}'"
@@ -322,9 +469,8 @@ Expected: task ID with "working" status. Poll for completion with `tasks/get`. I
 
 | Condition | Action |
 |-----------|--------|
-| A2A `.well-known/agent.json` fails | `docker exec agent-zero bash -c "pkill -9 -f a2a_agent; cd /a0 && /opt/venv-a0/bin/python3 -u /a0/usr/a2a_agent.py > /tmp/a2a.log 2>&1 &"` |
-| Adapter process missing | Restart adapter inside container with env vars |
-| Silence > 600s | Restart adapter (auto-reconnect handles BAD_EVENT_QUEUE_ID) |
+| A2A returns `000` (connection refused/timeout) | Alert only — never restart the platform; investigate the agent-zero container |
+| A2A returns a status other than `200`/`401` | Log/report as a warning — reported, never healed on |
 | LiteLLM 401 | Check API key in a2a_agent.py `LITELLM_KEY` |
 
 ### Step 5: Global Checks
@@ -333,8 +479,7 @@ Expected: task ID with "working" status. Poll for completion with `tasks/get`. I
 
 Check each agent's log for excessive bot-to-bot chatter:
 - Abiba: `Skipped.*bot msgs` count
-- Tanko/Mumuni: Repeated DM exchanges between bots
-- kagentz: Adapter log for bot DMs being processed
+- Tanko: Repeated DM exchanges between bots
 
 If any bot processes >50 bot-originated messages in 15min → warning.
 

zulip-mention-reliability.prose.md

@@ -10,8 +10,9 @@ description: >
 
 > **⚠️ RETIRED** — The pi Zulip extension (`~/.pi/agent/extensions/zulip/`) and
 > PM2 process (`abiba-zulip`) have been decommissioned. All mention/reliability
-> monitoring now happens through Telegram. Agents (Mumuni on Hermes, Tanko on DSH) and
-> Agent Zero (kagentz) continue to use Zulip.
+> monitoring now happens through Telegram. Mumuni (Hermes) and Tanko (DSH)
+> continue to use Zulip; Agent Zero's Zulip adapter is retired — see
+> `zulip-health.prose.md` for current Platform C (Agent Zero) state.
 
 ## Maintains