sync: auto-sync from HOWARD-HOME at 2026-06-16 01:20:51

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-16 01:20:51

clients/cascades-tucson/session-logs/2026-06/2026-06-15-howard-cascades-wifi-rf-audit.md

@@ -464,3 +464,22 @@ cabling/NIC issue = the long-suspected FastEthernet uplink problem, now fleet-vi
 SKILL coverage now: WiFi (monitor+tune+full apply incl. device lock/client controls) + switch/PoE audit,
 all controller-side multi-client + AP-side where cred vaulted. ROADMAP remaining: gateway/WAN/firewall +
 adoption collectors. Coord: this msg.
+
+---
+
+## Update: 2026-06-16 01:20 PT — gateway/WAN + site-health collector (gw-audit.sh); ROADMAP C largely done
+
+NEW scripts/gw-audit.sh <site> (controller-side, any site, read-only) via stat/health + gateway device:
+WAN status/IP/uplink/duplex + gw CPU/mem/uptime; internet(www) status/latency/drops/last-speedtest;
+health rollup (APs/switches/gw adopted vs disconnected vs pending, client user/guest/iot, firmware-
+upgradable); flags WAN/internet not-ok, latency>80/drops>5, WAN down, disconnected/pending, gw cpu>85/
+mem>90. Third-party-firewall sites (num_gw=0) handled. Fixed: gw_name fallback to device name; drops
+threshold >5 (was >0, too sensitive).
+
+Validated: Sonoran Glass (USG 3P [UGW3]) -> all healthy (cpu2%/mem21%, latency 14-24ms); Cascades
+(pfSense) -> "no UniFi gateway" + correctly caught 2 disconnected APs + 3 disconnected switches.
+
+SKILL now end-to-end for any client: WiFi (monitor + tune + full apply incl device-lock/client-control),
+switch/PoE audit, gateway/WAN/site-health audit, sites.sh discovery. ROADMAP remaining: deeper
+firewall/VPN policy + adoption REMEDIATION (adopt/restart), channel-plan apply, per-client AP creds/VPN.
+Coord: this msg.