- Five HUB_TOKEN_* keys added to the host secrets file (mode 600, backup kept).
- docker compose up -d --build recreated the hub container on :8788 with the
AUD-49 image (central-ai-hub:local, sha256:f6b773c8a33a), user 1000:100.
- Verified: /health ok with omniroute ok, control action refused, bad token
401, container healthy.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
- Add scripts/provision-hub-tokens.sh. It adds the five HUB_TOKEN_* keys to
~/.config/environment.d/10-secrets.conf. It is idempotent, keeps mode 600,
leaves a mode-600 backup, and never prints a value. It uses openssl when
present and /dev/urandom otherwise (this host has no openssl).
- docker-compose.yml: run the container as the host user. The image's
distroless nonroot user cannot read the 0600 secrets file. With nonroot the
Hub read no tokens and every /ask returned 401.
- Document the deploy steps, the finding, and the dry-run evidence in
docs/outline/04-agent-runbook.md, docs/outline/02-config-and-env.md, README.md.
Dry run on port 18788 with a scratch secrets file: /health ok with
omniroute ok, control action refused, bad token 401. The host secrets file and
the running hub container were not touched.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
- Three inbound routes from docs/hub-api.md: POST /ask, POST /approve, GET /health.
- Five-step pipeline in src/hub, with packages hear, understand, check, route, answer.
- Routing through OmniRoute with the capability list and routing.md. The
never-route control check runs before any LLM call.
- One real destination: Jervis house TTS, started out of band.
- Fake /ask project (src/tests/fakeproject) for the round-trip test.
- Append-only, size-capped request log. Bearer auth, source match, rate limit.
- Tests: all packages pass, including the fake /ask round trip. Race clean.
- Dockerfile and compose updated to mount routing.md and secrets, log on tmpfs.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
The runbook now holds the recorded result, not only the steps.
- Key source: PAPERCLIP_API_KEY in environment.d/10-secrets.conf.
- Job: AUD-55 (d58891ce-9934-4710-9bba-d37974251ed9), closed done.
- Result: "The Hub round trip works."
- Announce: POST http://192.168.20.13:8501/announce, HTTP 200.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Add scripts/paperclip-roundtrip.sh. It files one Paperclip issue and prints
the returned id and identifier. The key comes from the environment, then from
environment.d. The script never prints the key.
Fix the runbook: the create route is POST /api/companies/{companyId}/issues.
The old POST /api/issues route returns 404.
Record the first filed job: AUD-55 (d58891ce-9934-4710-9bba-d37974251ed9).
Co-Authored-By: Paperclip <noreply@paperclip.ing>
- docs/hub-api.md: language decision (Go 1.25) with reason and the
frozen v1 routes POST /ask, POST /approve, GET /health, including
request/response schemas, bearer-token auth, timeouts, error shapes,
logging, versioning, and a safety confirmation that no route is a
high-consequence control.
- Update README, hub_brief.md open items, and the outline docs so they
no longer say the API is undecided or the language is open.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
- Rename the README diagram's "Destinations" group to "Peers and services".
- Draw internet control as Hub "ask only (query)" and admin app
"control + tap to approve"; draw Paperclip as "slow job (approved)".
- Keep the .mmd source in step with the README diagram.
- State the admin app's scope in the system overview.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
