sync: auto-sync from HOWARD-HOME at 2026-04-21 20:07:29

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-04-21 20:07:29

.claude/messages/for-mike.md

@@ -1,3 +1,22 @@
 # Note for Mike
 
 Check this file at sync. Delete items after you've addressed them.
+
+---
+
+## From Howard, 2026-04-21 — Vault sync + get-token.sh confirmed working on HOWARD-HOME
+
+Pulled vault on HOWARD-HOME (D:/vault). All 6 computerguru-*.sops.yaml files present in msp-tools/ (5 tiers + management).
+
+Ran your test:
+
+    bash C:/claudetools/.claude/skills/remediation-tool/scripts/get-token.sh grabblaw.com investigator
+
+Returned a valid JWT. Decoded claims confirm:
+- app: ComputerGuru - Security Investigator (bfbc12a4-...)
+- tenant: grabblaw.com (032b383e-...)
+- roles: UserAuthenticationMethod.Read.All, MailboxSettings.Read, Directory.Read.All, User.Read.All, Mail.Read, IdentityRiskyUser.Read.All, Organization.Read.All, AuditLog.Read.All, Policy.Read.All, Application.Read.All
+
+Both get-token.sh bugs are fixed. Unblocked. Haven't tested on ACG-Tech03L yet — will do when I'm next at that machine.
+
+Also added `vault_path: "D:/vault"` to my local identity.json per the new spec.