3 Commits

Author	SHA1	Message	Date
Mike Swanson	1aa9fcecad	glaztech: Tom reply #2 (sent) + quo checklist + payroll/TimeForce answer logged ... - 2026-06-05-tom-reply2-draft.md (SENT): web-DB rearchitecture ack, CVV-no-paper correction, key-backup/escrow guidance, least-priv sync-job note - 2026-06-05-tom-quo-checklist.txt: clean 80-site quo() list sent to Tom - session log: TimeForce 2005->2008->2016 payroll chain (load-bearing, preserve) - guru-rmm submodule pointer -> dashboard redesign doc set (local) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-05 14:37:26 -07:00
Mike Swanson	51b3d799f5	scc: Session save and push from GURU-5070 at 2026-06-05 10:35 ... glaztech: :3436 backup-job recon + Tom's architectural reply; session log update. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-05 11:35:16 -07:00
Mike Swanson	1e957fa922	glaztech: least-privilege tom DB migration scope + 2026-06-05 session log ... Scope (v0.3) for replacing the website's sysadmin login 'tom' with a least-privilege login: two-phase plan (GTIware co-residency forces keeping cc_file in Phase 1), Grok + Gemini independent review folded in, and live RMM recon findings that materially changed the picture - the website is a cross-office + Sage accounting + payroll + msdb hub on one sysadmin credential, SQL is centralized on GTI-INV-SQL\GTISQL:3436 (not per-site). PARKED pending a full network recon. Session log covers the website outage fix (incomplete E1 ACL hardening) + the scoping + recon. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-05 10:01:18 -07:00