claudetools/clients/cascades-tucson/session-logs/2026-07/2026-07-15-howard-technology-plan-final.md

Cascades of Tucson Technology Plan — built and finalized (client deliverable)

User

• User: Howard Enos (howard)
• Machine: Howard-Home
• Role: tech

Session Summary

Built the client-facing Technology Plan for Cascades of Tucson (FY 2026–2027), starting from the June 2026 CARF-oriented drafts and reconciling them against the wiki (current truth) via a delegated fact-check. Howard directed a plain, Done / To-do structure per area with an Action/Owner/Cost/Target table — no fluff, no negative framing of ACG, no CARF-intake blockers (governance fields left as [at adoption] placeholders).

The plan covers the 8 core areas (Hardware, Software, Security/HIPAA, Confidentiality, Backup, Assistive technology, Disaster recovery, Virus & threat protection) plus supplementary areas (Communication technology, Services purchased, Use of AI) and a review/revision block. Rendered as a branded 3-page PDF via headless Chrome from a hand-built HTML using the ACG design tokens (paper/ink/orange palette, Barlow Condensed / Lexend / JetBrains Mono).

Iterated to final on Howard's live corrections: backup section reworded to plain Synology-syncs-to-server + online off-site backup (no MSP360/license talk); all "outdated server" age references removed; offline switches recognized as by-design (wiki updated + errorlog correction); workstation replacement list expanded from hardware evidence in the March 2026 fleet audit (workstations.md); server power-supply row dropped (unit just not connected); M365 licensing changed to a right-sizing item (not everyone needs full Office); Synology NAS repurpose-as-onsite-backup added to area 5; the two remaining legacy-agent machines named (DESKTOP-TRCIEJA, DESKTOP-F94M8UT); Ashley Jensen's name removed from the document entirely; CHEF-PC changed from rebuild to full replace (list now 5 + spare); UPS coverage moved to Done (installed on all switches) and the verify to-do removed. Howard confirmed the "scope and quote a server refresh project" row stays as written.

Final deliverable: 3-page PDF, no Chrome header/footer, verified visually page-by-page. The .md (master content), .html (render source), and .pdf are in sync.

Key Decisions

• Done / To-do per-area structure at Howard's request; positive professional tone, no self-criticism of ACG, minimal prose.
• Governance fields (adopted by/date, next review) intentionally left as [at adoption] placeholders rather than blocking on CARF intake answers.
• Workstation replacement list built strictly from the March 2026 hardware audit evidence (Win11 CPU support, RAM, machine age) — no guessed machines.
• Final replacement list (5 + spare): DESKTOP-TRCIEJA (Lupe Sanchez, EOL), ASSISTMAN-PC (Meredith Kuhn, i5-6200U cannot run Win11), MDIRECTOR-PC (Shelby Trozzi, 3.9 GB RAM), MEMRECEPT-PC (Pentium E5500, oldest in fleet), CHEF-PC (Culinary — Howard upgraded it from rebuild to replace), plus spare deployed to a new hire.
• M365: right-size licensing instead of consolidate-everyone-onto-Business-Premium — Howard: not everyone needs the full Office license; framed as "reduces monthly cost".
• Synology NAS will be repurposed as the server's ONSITE backup target (off-site online backup continues) — added as a 60–90 day Backup to-do.
• Server power supply is NOT a work item (likely just not connected) — removed.
• UPS: installed on all switches — moved to Done in area 7; verify-coverage to-do removed.
• No client staff names in the deliverable (Ashley Jensen removed; masthead now "Attn: Business Office"). Note: replacement-list user names (Lupe/Meredith/Shelby) were kept — only Ashley's was requested removed.
• "Scope and quote a server refresh project" kept as-is after explaining it to Howard (it means produce a formal quote within 90 days, not committed spend; pairs with area 7 server redundancy).

Problems Encountered

• Headless Chrome render intermittently no-ops on first invocation after taskkill (exit path produces no PDF, or leaves the stale file untouched — caught once by identical byte size + old timestamp). Fix: retry the same command; verify freshness by timestamp/byte-size change before trusting the output.
• First render in the earlier segment had Chrome's default header/footer — fixed with --no-pdf-header-footer (kept in all subsequent renders).
• PDF text-extraction check (zlib streams) found nothing — text is drawn with subset-encoded glyphs; verification must be visual (Read the PDF) not grep-based.
• pdftoppm not available on this machine — Read the PDF without the pages param instead.
• Wiki article too large to Read directly (~70k tokens) — fact-check delegated to an Explore agent with an itemized claim checklist.

Configuration Changes

• [created/edited] clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.md — master plan content (final).
• [created/edited] clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.html — branded render source (final, in sync with .md).
• [created/rendered] clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.pdf — 3-page deliverable, 400,341 bytes, rendered 2026-07-15 11:14.
• [edited] clients/cascades-tucson/docs/proposals/carf-technology-plan-intake.md — backup wording plain (Synology syncs to server, server backed up online); MSP360 removed.
• [edited] wiki/clients/cascades-tucson.md — offline switches (Switch 4th Floor #2, USW Pro Max 16) marked "offline by design — not an issue (Howard, 2026-07-15). Do not flag or investigate."
• [appended] errorlog.md — --correction: assumed offline UniFi switches were an issue; correct is offline by design.

Credentials & Secrets

None touched this session.

Infrastructure & Servers

• CS-SERVER: EDR covered since 2026-07-13; Datto EDR is the endpoint standard (~35 agents).
• Legacy-agent stragglers: DESKTOP-TRCIEJA (Bitdefender BD_ACTIVE; GravityZone console-only uninstall; retires with its hardware replacement) and DESKTOP-F94M8UT (Alma Montt's old machine, powered off; BD-aware EDR install queued, fires on power-on).
• Network: UniFi 77 APs / 12 managed switches; pfSense dual-WAN (Cox); UPS now on all switches.
• M365 tenant cascadestucson.com — Business Premium 45 seats enabled; licensing right-size planned.

Commands & Outputs

• PDF render (proven, flaky on first run — retry if no fresh file): "/c/Program Files/Google/Chrome/Application/chrome.exe" --headless --disable-gpu --no-sandbox --no-pdf-header-footer --virtual-time-budget=8000 --print-to-pdf="<abs path>.pdf" "file:///C:/claudetools/clients/cascades-tucson/docs/proposals/cascades-technology-plan-2026-07-15.html"
• Page count: py -c "import re;d=open('<pdf>','rb').read();print(max(int(m) for m in re.findall(rb'/Count\s+(\d+)',d)))" → 3.
• Freshness check: compare byte size + mtime after render; identical size/old mtime = stale, re-run.

Pending / Incomplete Tasks

• Deliver the PDF to Cascades (Business Office) — Howard to send.
• Borderline replacement candidates NOT added (offered, not confirmed): ACCT2-PC (i3-1005G1, 118 GB disk), LAPTOP-DRQ5L558 + LAPTOP-E0STJJE8 (Ryzen 3500U, 6 GB).
• Governance placeholders ([at adoption], adopted-by date, next annual review) to be filled when Cascades formally adopts the plan.
• Synology onsite-backup repurpose is now a committed plan item (60–90 days) — actual implementation work not started.
• Standing items from 7/14 session remain: Juan Andrade offboarding (7/16 PM), break-glass accounts, audit logging build, BAA inventory.

Reference Information

• Deliverable dir: clients/cascades-tucson/docs/proposals/
• Fleet audit source: clients/cascades-tucson/docs/workstations.md (March 2026)
• Remaining-work plan: clients/cascades-tucson/docs/REMAINING-WORK-PLAN.md
• Straggler pass log: clients/cascades-tucson/session-logs/2026-06/2026-06-26-howard-edr-bd-straggler-9am-pass.md
• Prepaid balance shown in footer: 37.5 hrs as of 2026-07-10