Commit Graph

255 Commits

Author SHA1 Message Date
f5bdec125a sync: auto-sync from HOWARD-HOME at 2026-06-05 16:17:06
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 16:17:06
2026-06-05 16:17:18 -07:00
1aa9fcecad glaztech: Tom reply #2 (sent) + quo checklist + payroll/TimeForce answer logged
- 2026-06-05-tom-reply2-draft.md (SENT): web-DB rearchitecture ack, CVV-no-paper
  correction, key-backup/escrow guidance, least-priv sync-job note
- 2026-06-05-tom-quo-checklist.txt: clean 80-site quo() list sent to Tom
- session log: TimeForce 2005->2008->2016 payroll chain (load-bearing, preserve)
- guru-rmm submodule pointer -> dashboard redesign doc set (local)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 14:37:26 -07:00
68298c8b70 sync: auto-sync from HOWARD-HOME at 2026-06-05 14:06:17
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 14:06:17
2026-06-05 14:06:24 -07:00
47b71b7b3a rmm dashboard redesign (Gemini live review) + CDP Chrome driver
- .claude/scripts/cdp.py: drive Chrome via DevTools Protocol; screenshots to disk
  (so Gemini/Grok can see the live site). Fixes invisible-window + no-disk-screenshot.
- reference_cdp_chrome_driver.md (+ MEMORY index)
- gururmm submodule pointer -> dashboard redesign docs (local 3cef6ba)
- session log

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 13:10:37 -07:00
ef23753956 sync: auto-sync from HOWARD-HOME at 2026-06-05 12:18:49
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 12:18:49
2026-06-05 12:18:59 -07:00
08e194f592 bardach: M365 account investigation + Security Defaults MFA enforcement
Investigated barbara@bardach.net login issues (account-locked message, INKY SSL
errors). Finding: active distributed password-spray against the tenant (also
hitting admin@), NOT a breach — no successful attacker sign-in, no mailbox/rule/
forwarding changes. Root exposure: MFA not enforced (no Entra P1 -> no CA).

Remediation (Mike confirmed): enabled Security Defaults tenant-wide. Both active
accounts MFA-ready (Authenticator) -> no lockout; legacy auth now blocked.

- 2026-06-05-account-investigation-mfa-enforcement.md (full report)
- 2026-06-05-barbara-note-draft.md (client note, for Mike to send)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 11:52:46 -07:00
51b3d799f5 scc: Session save and push from GURU-5070 at 2026-06-05 10:35
glaztech: :3436 backup-job recon + Tom's architectural reply; session log update.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 11:35:16 -07:00
185a329770 glaztech: commit final Tom message + quo() fix-list
- 2026-06-05-tom-message-draft.md: Mike's final relief-framed wording
- 2026-06-05-quo-sql-fix-list.md: 80 live quo call sites across 15 files (C3)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 11:35:16 -07:00
9e98ca00cf sync: auto-sync from HOWARD-HOME at 2026-06-05 11:21:47
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 11:21:47
2026-06-05 11:21:58 -07:00
a8abe4a14b glaztech: staged-remediation pacing strategy + Steve approval + softened Tom message
Adds the "from emergency to deliberate staged objectives" pacing strategy
(severity unchanged, tempo deliberate - the depth of the Glaz tools estate makes
rushing the bigger risk) and records Steve's blanket approval (Tier A
execution-cleared). Softens the Tom outreach to a partnership / not-a-fire-drill
tone per Mike.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 10:40:14 -07:00
e18792ecf7 sync: auto-sync from HOWARD-HOME at 2026-06-05 10:26:08
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 10:26:08
2026-06-05 10:26:21 -07:00
21043d42bd glaztech: minimal-Tom remediation path (v0.2) + Tom outreach draft
Grok + Gemini consensus reframe of the way forward: ACG-owned containment
(E-bucket, DB de-privilege, WAF, SQL network segmentation) is the real C0
reduction; the audience/network split is real only for the employee surface.
Tom's one within-skill ask = parameterize the 59 quo() SQL queries (ACG hands
him the exact lines); tokenized payments is a deferred scaffolded sub-project.
Steve Eastman gave ACG blanket approval to proceed (Tier A execution-cleared).
Includes a relief-framed draft message to Tom.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 10:18:55 -07:00
1e957fa922 glaztech: least-privilege tom DB migration scope + 2026-06-05 session log
Scope (v0.3) for replacing the website's sysadmin login 'tom' with a
least-privilege login: two-phase plan (GTIware co-residency forces keeping
cc_file in Phase 1), Grok + Gemini independent review folded in, and live
RMM recon findings that materially changed the picture - the website is a
cross-office + Sage accounting + payroll + msdb hub on one sysadmin
credential, SQL is centralized on GTI-INV-SQL\GTISQL:3436 (not per-site).
PARKED pending a full network recon. Session log covers the website outage
fix (incomplete E1 ACL hardening) + the scoping + recon.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-05 10:01:18 -07:00
90e2cb2dd7 sync: auto-sync from GURU-5070 at 2026-06-05 08:06:47
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-05 08:06:47
2026-06-05 08:06:54 -07:00
a87cb66b32 sync: auto-sync from HOWARD-HOME at 2026-06-04 21:22:05
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-04 21:22:05
2026-06-04 21:22:16 -07:00
b93c9d9e94 sync: auto-sync from GURU-5070 at 2026-06-04 19:29:23
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-04 19:29:23
2026-06-04 19:29:28 -07:00
8389e64a02 sync: auto-sync from GURU-5070 at 2026-06-04 19:27:51
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-04 19:27:51
2026-06-04 19:27:56 -07:00
e08488ae5e sync: auto-sync from GURU-5070 at 2026-06-04 19:08:11
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-04 19:08:11
2026-06-04 19:08:18 -07:00
295126ee6c sync: auto-sync from GURU-BEAST-ROG at 2026-06-04 16:05:04
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-04 16:05:04
2026-06-04 16:07:29 -07:00
a51715e0ba sync: auto-sync from HOWARD-HOME at 2026-06-04 16:03:16
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-04 16:03:16
2026-06-04 16:03:23 -07:00
532be659de sync: auto-sync from HOWARD-HOME at 2026-06-04 15:42:39
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-04 15:42:39
2026-06-04 15:42:47 -07:00
5a78c56f36 sync: auto-sync from GURU-5070 at 2026-06-04 09:45:37
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-04 09:45:37
2026-06-04 09:45:42 -07:00
d2fd68bb0a sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-04 06:22:27
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-04 06:22:27
2026-06-04 08:08:58 -07:00
64b2d9e668 sync: auto-sync from GURU-5070 at 2026-06-04 07:07:43
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-04 07:07:43
2026-06-04 07:07:48 -07:00
10e8d7b6bb sync: auto-sync from GURU-5070 at 2026-06-03 19:39:32
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-03 19:39:32
2026-06-03 19:39:36 -07:00
a98fed14c9 sync: auto-sync from GURU-5070 at 2026-06-03 15:55:57
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-03 15:55:57
2026-06-03 15:56:04 -07:00
ae1ec4517a sync: auto-sync from GURU-BEAST-ROG at 2026-06-03 15:02:21
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-03 15:02:21
2026-06-03 15:03:07 -07:00
6de0ce6098 sync: auto-sync from GURU-5070 at 2026-06-03 11:52:45
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-03 11:52:45
2026-06-03 11:52:52 -07:00
6228793152 sync: auto-sync from HOWARD-HOME at 2026-06-03 11:51:39
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-03 11:51:39
2026-06-03 11:51:47 -07:00
c693dc1e24 sync: auto-sync from HOWARD-HOME at 2026-06-03 09:56:24
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-03 09:56:24
2026-06-03 09:56:31 -07:00
e1a0996e1a sync: auto-sync from HOWARD-HOME at 2026-06-03 09:33:26
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-03 09:33:26
2026-06-03 09:33:34 -07:00
8e70d73ece sync: auto-sync from HOWARD-HOME at 2026-06-02 20:29:22
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 20:29:22
2026-06-02 20:29:31 -07:00
bba57a1d3e sync: auto-sync from HOWARD-HOME at 2026-06-02 20:00:25
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 20:00:25
2026-06-02 20:00:35 -07:00
e0643310a0 sync: auto-sync from GURU-5070 at 2026-06-02 19:53:08
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-02 19:53:08
2026-06-02 19:53:12 -07:00
0413df8459 sync: auto-sync from GURU-5070 at 2026-06-02 18:44:13
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-02 18:44:13
2026-06-02 18:44:21 -07:00
92102ea759 sync: auto-sync from HOWARD-HOME at 2026-06-02 18:26:27
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 18:26:27
2026-06-02 18:26:35 -07:00
35b227ec8e sync: auto-sync from HOWARD-HOME at 2026-06-02 17:51:53
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 17:51:53
2026-06-02 17:52:03 -07:00
7955e5e8b9 sync: auto-sync from HOWARD-HOME at 2026-06-02 15:12:52
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 15:12:52
2026-06-02 15:13:02 -07:00
b430c4c7c7 sync: auto-sync from HOWARD-HOME at 2026-06-02 14:20:08
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 14:20:08
2026-06-02 14:20:17 -07:00
5823112c94 sync: auto-sync from HOWARD-HOME at 2026-06-02 12:14:57
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 12:14:57
2026-06-02 12:15:06 -07:00
61081f70c2 sync: auto-sync from GURU-BEAST-ROG at 2026-06-02 10:44:23
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-02 10:44:23
2026-06-02 10:44:29 -07:00
25ce5f0439 sync: auto-sync from GURU-BEAST-ROG at 2026-06-02 09:10:35
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-02 09:10:35
2026-06-02 09:10:39 -07:00
320824c9ef sync: auto-sync from GURU-BEAST-ROG at 2026-06-02 09:04:57
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-02 09:04:57
2026-06-02 09:05:01 -07:00
9d24d65e52 sync: auto-sync from GURU-BEAST-ROG at 2026-06-02 08:42:53
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-02 08:42:53
2026-06-02 08:43:00 -07:00
9d0459b0ea sync: auto-sync from GURU-5070 at 2026-06-02 08:29:11
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-02 08:29:11
2026-06-02 08:29:16 -07:00
c52faa24a8 sync: auto-sync from GURU-5070 at 2026-06-02 07:33:26
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-02 07:33:26
2026-06-02 07:33:31 -07:00
f8ed03c75a sync: auto-sync from GURU-5070 at 2026-06-02 07:25:49
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-02 07:25:49
2026-06-02 07:25:55 -07:00
f7c18f0f23 sync: auto-sync from HOWARD-HOME at 2026-06-02 00:30:09
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-02 00:30:09
2026-06-02 00:30:16 -07:00
a6a3585266 sync: auto-sync from HOWARD-HOME at 2026-06-01 22:49:04
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-01 22:49:04
2026-06-01 22:49:12 -07:00
918afc5c26 sync: auto-sync from HOWARD-HOME at 2026-06-01 21:11:22
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-01 21:11:22
2026-06-01 21:11:31 -07:00