Live projection of the operating substrate. Regenerated straight from the
canonical event record every time anything changes — no hand-edited status.
This URL is stable and updates in place.
Tap a card for decisions, open work, and recent movement.
hermes-iphone-access active1 open3 unaccepted
Now: WebUI live on 127.0.0.1:8787 (health ok, auth-gated); rootless userspace tailscaled installed + launchd units for both; awaiting Mitch's one Google tap (account chooser open, ketronroofing.com chosen via GUI ask); watcher arms tailscale serve + verifies health the moment auth lands
Hermes WebUI reachable from Mitch's iPhone over Tailscale: private tailnet, password auth, auto-start, zero public exposure
Details
Open work
Mitch iPhone steps (after tap): install Tailscale iOS app, sign in with ketronroofing.com Google, then open WebUI URL; password in ~/.local/state/nexus/secrets/hermes-webui-password2026-08-08
Recent movement
LIVE and verified: iPhone (100.76.20.127) + Mac (100.85.24.65) both online on tailnet; WebUI health 200 + auth-gate 302 over tailnet IP; auto-start via com.parantoux.hermes-webui (KeepAlive) + Tailscale GUI app login item. URL http://100.85.24.65:87872026-08-08
ketron-os-stack active2 open3 unaccepted
Build and operate the repo-centric modular agent stack for all Ketron/NEXUS work
Convergence doctrine: kroofing/Ketron-OS is THE substrate of record for project state (Yohei stack). Three fabrics coexist without collapse: stack events.jsonl = per-project work record; nexus_core.sqlite (Mac) = Rain runtime fabric; open-brain source-estate = canonical evidence capture. nexus-live-portfolio-ledger repo and hand-edited WORKSTREAMS.md are superseded as portfolio views by PORTFOLIO projection + Mitch-facing Pages deploy.2026-08-07
Open work
Rotate CompanyCam API token (live SaaS; old token exposed in repo history). Then decide: purge history (coordinate all machines - Windows lane pulls this repo) or accept private-repo residual risk for dead Twenty/Vikunja tokens.2026-08-07
Port substrate pull/push Stop-hooks to Mac Claude surface (Windows lane has them via rain hooks; Mac covered meanwhile by launchd heartbeat every 15 min).2026-08-07