claudetools

Files

Mike Swanson 447b90e092 Session log: Cascades audit retention design + Pro-Tech Services email investigation

Cascades:
- Approved Howard's corrected 4-policy CA bypass design
- Caught + fixed policy 3 GDAP bug (Service provider users exclusion)
- Decided hybrid LAW + Storage Account audit retention (ACG-billed,
  reuse existing Trusted Signing Azure subscription, westus2)
- Wrote full audit retention runbook for Howard
- Reshaped break-glass to two accounts (split-storage YubiKeys)
- Documented Cascades M365 admin model (admin@/sysadmin@ Connect-excluded
  by design; local AD Administrator separate identity layer)
- Decided Howard gets Owner on ACG sub with guardrails (resource lock +
  cost alert) instead of per-RG Contributor

Pro-Tech Services:
- DNS recon of pro-techhelps.com + pro-techservices.co
- Diagnosed calendar invite delivery issue (DKIM domain mismatch +
  no DMARC = strict receivers silently drop invites)
- Drafted non-technical IT-provider migration email to Michelle Sora

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-29 17:05:41 -07:00

docs

sync: auto-sync from HOWARD-HOME at 2026-04-24 18:11:47

2026-04-24 18:11:48 -07:00

reports

sync: auto-sync from HOWARD-HOME at 2026-04-24 18:11:47

2026-04-24 18:11:48 -07:00

scripts

cascades: LE folder redirection end-to-end + share access review doc

2026-04-23 20:07:59 -07:00

session-logs

Session log: Cascades audit retention design + Pro-Tech Services email investigation