sync: auto-sync from HOWARD-HOME at 2026-07-15 11:39:11

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-15 11:39:11

clients/cascades-tucson/session-logs/2026-07/2026-07-15-howard-technology-plan-final.md

@@ -0,0 +1,135 @@
+# Cascades of Tucson Technology Plan — built and finalized (client deliverable)
+
+## User
+- **User:** Howard Enos (howard)
+- **Machine:** Howard-Home
+- **Role:** tech
+
+## Session Summary
+
+Built the client-facing Technology Plan for Cascades of Tucson (FY 2026–2027), starting from
+the June 2026 CARF-oriented drafts and reconciling them against the wiki (current truth) via a
+delegated fact-check. Howard directed a plain, Done / To-do structure per area with an
+Action/Owner/Cost/Target table — no fluff, no negative framing of ACG, no CARF-intake blockers
+(governance fields left as *[at adoption]* placeholders).
+
+The plan covers the 8 core areas (Hardware, Software, Security/HIPAA, Confidentiality, Backup,
+Assistive technology, Disaster recovery, Virus & threat protection) plus supplementary areas
+(Communication technology, Services purchased, Use of AI) and a review/revision block. Rendered
+as a branded 3-page PDF via headless Chrome from a hand-built HTML using the ACG design tokens
+(paper/ink/orange palette, Barlow Condensed / Lexend / JetBrains Mono).
+
+Iterated to final on Howard's live corrections: backup section reworded to plain
+Synology-syncs-to-server + online off-site backup (no MSP360/license talk); all "outdated
+server" age references removed; offline switches recognized as by-design (wiki updated + errorlog
+correction); workstation replacement list expanded from hardware evidence in the March 2026
+fleet audit (workstations.md); server power-supply row dropped (unit just not connected);
+M365 licensing changed to a right-sizing item (not everyone needs full Office); Synology NAS
+repurpose-as-onsite-backup added to area 5; the two remaining legacy-agent machines named
+(DESKTOP-TRCIEJA, DESKTOP-F94M8UT); Ashley Jensen's name removed from the document entirely;
+CHEF-PC changed from rebuild to full replace (list now 5 + spare); UPS coverage moved to Done
+(installed on all switches) and the verify to-do removed. Howard confirmed the "scope and quote
+a server refresh project" row stays as written.
+
+Final deliverable: 3-page PDF, no Chrome header/footer, verified visually page-by-page. The
+.md (master content), .html (render source), and .pdf are in sync.
+
+## Key Decisions
+
+- Done / To-do per-area structure at Howard's request; positive professional tone, no
+  self-criticism of ACG, minimal prose.
+- Governance fields (adopted by/date, next review) intentionally left as *[at adoption]*
+  placeholders rather than blocking on CARF intake answers.
+- Workstation replacement list built strictly from the March 2026 hardware audit evidence
+  (Win11 CPU support, RAM, machine age) — no guessed machines.
+- Final replacement list (5 + spare): DESKTOP-TRCIEJA (Lupe Sanchez, EOL), ASSISTMAN-PC
+  (Meredith Kuhn, i5-6200U cannot run Win11), MDIRECTOR-PC (Shelby Trozzi, 3.9 GB RAM),
+  MEMRECEPT-PC (Pentium E5500, oldest in fleet), CHEF-PC (Culinary — Howard upgraded it from
+  rebuild to replace), plus spare deployed to a new hire.
+- M365: right-size licensing instead of consolidate-everyone-onto-Business-Premium — Howard:
+  not everyone needs the full Office license; framed as "reduces monthly cost".
+- Synology NAS will be repurposed as the server's ONSITE backup target (off-site online backup
+  continues) — added as a 60–90 day Backup to-do.
+- Server power supply is NOT a work item (likely just not connected) — removed.
+- UPS: installed on all switches — moved to Done in area 7; verify-coverage to-do removed.
+- No client staff names in the deliverable (Ashley Jensen removed; masthead now "Attn: Business
+  Office"). Note: replacement-list user names (Lupe/Meredith/Shelby) were kept — only Ashley's
+  was requested removed.
+- "Scope and quote a server refresh project" kept as-is after explaining it to Howard (it means
+  produce a formal quote within 90 days, not committed spend; pairs with area 7 server
+  redundancy).
+
+## Problems Encountered
+
+- Headless Chrome render intermittently no-ops on first invocation after taskkill (exit path
+  produces no PDF, or leaves the stale file untouched — caught once by identical byte size +
+  old timestamp). Fix: retry the same command; verify freshness by timestamp/byte-size change
+  before trusting the output.
+- First render in the earlier segment had Chrome's default header/footer — fixed with
+  `--no-pdf-header-footer` (kept in all subsequent renders).
+- PDF text-extraction check (zlib streams) found nothing — text is drawn with subset-encoded
+  glyphs; verification must be visual (Read the PDF) not grep-based.
+- `pdftoppm` not available on this machine — Read the PDF without the pages param instead.
+- Wiki article too large to Read directly (~70k tokens) — fact-check delegated to an Explore
+  agent with an itemized claim checklist.
+
+## Configuration Changes
+
+- [created/edited] `clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.md`
+  — master plan content (final).
+- [created/edited] `clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.html`
+  — branded render source (final, in sync with .md).
+- [created/rendered] `clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.pdf`
+  — 3-page deliverable, 400,341 bytes, rendered 2026-07-15 11:14.
+- [edited] `clients/cascades-tucson/docs/proposals/carf-technology-plan-intake.md` — backup
+  wording plain (Synology syncs to server, server backed up online); MSP360 removed.
+- [edited] `wiki/clients/cascades-tucson.md` — offline switches (Switch 4th Floor #2, USW Pro
+  Max 16) marked "offline by design — not an issue (Howard, 2026-07-15). Do not flag or
+  investigate."
+- [appended] `errorlog.md` — `--correction`: assumed offline UniFi switches were an issue;
+  correct is offline by design.
+
+## Credentials & Secrets
+
+None touched this session.
+
+## Infrastructure & Servers
+
+- CS-SERVER: EDR covered since 2026-07-13; Datto EDR is the endpoint standard (~35 agents).
+- Legacy-agent stragglers: DESKTOP-TRCIEJA (Bitdefender BD_ACTIVE; GravityZone console-only
+  uninstall; retires with its hardware replacement) and DESKTOP-F94M8UT (Alma Montt's old
+  machine, powered off; BD-aware EDR install queued, fires on power-on).
+- Network: UniFi 77 APs / 12 managed switches; pfSense dual-WAN (Cox); UPS now on all switches.
+- M365 tenant cascadestucson.com — Business Premium 45 seats enabled; licensing right-size
+  planned.
+
+## Commands & Outputs
+
+- PDF render (proven, flaky on first run — retry if no fresh file):
+  `"/c/Program Files/Google/Chrome/Application/chrome.exe" --headless --disable-gpu --no-sandbox
+  --no-pdf-header-footer --virtual-time-budget=8000 --print-to-pdf="<abs path>.pdf"
+  "file:///C:/claudetools/clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.html"`
+- Page count: `py -c "import re;d=open('<pdf>','rb').read();print(max(int(m) for m in
+  re.findall(rb'/Count\s+(\d+)',d)))"` → 3.
+- Freshness check: compare byte size + mtime after render; identical size/old mtime = stale,
+  re-run.
+
+## Pending / Incomplete Tasks
+
+- Deliver the PDF to Cascades (Business Office) — Howard to send.
+- Borderline replacement candidates NOT added (offered, not confirmed): ACCT2-PC (i3-1005G1,
+  118 GB disk), LAPTOP-DRQ5L558 + LAPTOP-E0STJJE8 (Ryzen 3500U, 6 GB).
+- Governance placeholders (*[at adoption]*, adopted-by date, next annual review) to be filled
+  when Cascades formally adopts the plan.
+- Synology onsite-backup repurpose is now a committed plan item (60–90 days) — actual
+  implementation work not started.
+- Standing items from 7/14 session remain: Juan Andrade offboarding (7/16 PM), break-glass
+  accounts, audit logging build, BAA inventory.
+
+## Reference Information
+
+- Deliverable dir: `clients/cascades-tucson/docs/proposals/`
+- Fleet audit source: `clients/cascades-tucson/docs/workstations.md` (March 2026)
+- Remaining-work plan: `clients/cascades-tucson/docs/REMAINING-WORK-PLAN.md`
+- Straggler pass log: `clients/cascades-tucson/session-logs/2026-06/2026-06-26-howard-edr-bd-straggler-9am-pass.md`
+- Prepaid balance shown in footer: 37.5 hrs as of 2026-07-10