sync: auto-sync from HOWARD-HOME at 2026-07-15 12:52:13

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-15 12:52:13

clients/cascades-tucson/session-logs/2026-07/2026-07-15-howard-technology-plan-final.md

@@ -162,3 +162,53 @@ Mike (GURU-5070) confirming: id 3c07fd3e-7f93-401d-8d46-339c968552f9.
 
 Files touched this update: proposals .md/.html/.pdf, docs/cloud/m365.md,
 wiki/clients/cascades-tucson.md.
+
+## Update: 12:51 PT — Live verification sweep + jodi.ramstack decommission
+
+### Live verification of the tech plan (Howard requested)
+
+Ran 4 parallel read-only verification agents + direct DNS checks against every verifiable
+"Done" claim in the plan. Results:
+
+**CONFIRMED live (plan accurate):**
+- Email auth: SPF `-all`, DMARC `p=quarantine pct=100`, DKIM selectors published (M365).
+- M365: SPB 45/41/4; Standard SUSPENDED 30 consumed. MFA-for-all CA policy enabled;
+  caregiver network-block CA policy live (trusted location 72.211.21.217/32 +
+  184.191.143.62/32) + 8h sign-in frequency. ALIS SSO SP enabled, active sign-ins today.
+- Datto EDR (azcomp4587): 35/35 agents AV-enabled; CS-SERVER heartbeat ~3 min old, defs
+  released today. DESKTOP-TRCIEJA active (retires w/ replacement); DESKTOP-F94M8UT gone.
+  Stale unchanged: desktop-kqsl232 47d, maintenance-pc 26d.
+- UniFi (UOS 172.16.3.29:11443, site va6iba3v): exactly 77 APs (75 online); ~240 networks —
+  per-room VLANs 101–631, voice VLAN 30 with exactly 37 clients, staff/guest/mgmt separated.
+  Sub-gigabit to-do current: 34 active 100Mb switch ports + 5 APs uplinked at 100Mb
+  (APs 122, 145, 204, 236, 240 — highest-impact fixes).
+- MSP360: CS-SERVER file backup Success today 07:00 (daily verified).
+
+**Discrepancies found (NOT applied — Howard: "leave the rest alone and do not add"):**
+- Switches: controller shows 11 (8 online, 2 offline USL24PB, 1 pending), plan says 12.
+- Caregiver policy live since 2026-04-29 (plan says 2026-07-01 — that was another policy's mod date).
+- MSP360 image plan last success 2026-07-05 (file plan is the daily one).
+- pfSense config vaulted 2026-06-17 point-in-time; Netgate ACB still not enabled.
+- Dual-WAN failover: configured/documented, not live-verified (pfSense GUI needed).
+
+**Correction (logged --correction):** verification agent reported Synology-to-server sync as
+partial/overstated based on STALE wiki (6/18 Team Folder [PENDING] notes). Howard confirmed
+the shared-folder syncs to the server ARE set up. Wiki lines ~487/633 in
+wiki/clients/cascades-tucson.md are stale on this point (not yet edited).
+
+### jodi.ramstack decommission (Howard requested)
+
+Via remediation-tool user-manager tier (Graph), user id b7cddbeb-6026-436b-a3aa-67c4be43e3fb:
+1. accountEnabled=false (204); 2. revokeSignInSessions (200); 3. removed license
+f245ecc8-75af-4f8e-b61f-27d8114de5f3 (suspended Business Standard) (200). Verified:
+disabled, assignedLicenses=[].
+
+Shared-mailbox conversion attempted (exchange-op tier, EXO admin API): **no mailbox exists**
+— Set-Mailbox/Get-Mailbox -SoftDeletedMailbox/Get-Recipient all NotFound; Graph
+mailboxSettings 404 MailboxNotEnabledForRESTAPI. Mailbox was deprovisioned long before today
+by the suspended subscription (last sign-in 2025-03-28) — no mail data left in the tenant to
+preserve. Account object retained (disabled/unlicensed).
+
+Gotcha hit: `UID` is a readonly bash variable — use another name (JID) in Git-Bash one-liners.
+
+PDF unchanged (4 pages, 433,980 bytes) — Howard sends to Mike.