Windows machines: Connie (desktop, PS C:\Users\Rob>) + Surface (rkbla, ARM64). Cowork can show SURFACE paths even on Connie — verify before attaching. Multiple Hermes.exe procs = normal Electron, never kill. VPS admin via Hostinger web terminal only, no SSH from Windows. Connie: OneDrive UNINSTALLED (Rob's call — KFM hijacked Documents); Documents = C:\Users\Rob\Documents, vault at ...\Documents\Obsidian Vault, never suggest OneDrive paths. Photos ONLY at onedrive.live.com. Pictures sidebar gone (Win11 Gallery) — Quick Access pin is the workaround.
§
GHL: V3 app live 2026-08-03. AGENCY token reads+writes ALL sub-accounts EXCEPT funnels+voice-ai (per-endpoint authClass → location token needed; RRR location token held since 2026-08-07). V3 secret chat-pasted — ROTATE. Runbook: gohighlevel-ops skill.
§
VPS gateway: system unit hermes-gateway.service (NOT --user) — keep enabled. Dashboard 127.0.0.1:9119 behind nginx 443. gateway_state.json can lie — trust ps/systemctl. 0.19.0 venv patches wiped by pip --force-reinstall (operating-hermes-gateway skill). hermes NOT on PATH — use /root/.hermes/venv/bin/hermes.
§
Connie = pure client, no local gateway/keep-awake (startup cleaned; if 'RobBlake_ACPower_NoSleep' task returns, kill via elevated Unregister-ScheduledTask). Telegram conflicts = orphan pythonw, kill via ADMIN PS. Agentic OS retired.
§
Hermes pip channel frozen at 0.19.0 (final pip release); migrate VPS to native installer when v0.20.0 ships. Patch backup: /root/.hermes/patch-backup-0.19.0/. Connie Desktop = unpacked dev build 40.10.2 (no auto-update), still needs proper Desktop install.
§
SkillClaw closed loop live on VPS; records explicit proxy traffic only, gateway/desktop bypass by design. Runbook: skillclaw-ops.
§
VPS RO-/root install playbook: skill `vps-tool-installation`.
§
Hostinger terminal: Ctrl+V ONLY (right-click mangles quotes); window needs click-focus or keystrokes die. Paste-and-done blocks with built-in grep verify, never nano. Short lines, no &&-chains. Repeated failure → STOP, write files agent-side. Runbook: hostinger-web-terminal-ops skill.
§
robblake.cloud: DNS + Let's Encrypt cert live (certbot --nginx, auto-renews). Windows resolvers may cache old NXDOMAIN — ipconfig /flushdns.
§
Rob left Lumen (Apr 2023) by choice for a +$35K raise + broader scope at Trimble — NOT restructuring/layoff. Never script his why-left narrative without confirming the real story with him first.
§
Brand workflow: blog posts FIRST (~1000 words, 18 vertical versions for RRR), then FB posts as summaries — not standalone. Exact-spec logos: Pillow render script in brand-asset-generation skill, not image_generate.
§
PL brand LOCKED: amber #E8893A, navy #0B1120/#0C111D, light #EAEEF6, muted #9AA3B8; site blue/cyan = UI-only, never brand. Rob's taste beats my contrast-math — present trade-offs, palette canonicity is HIS call. Details: brand-asset-generation skill.
§
Token discipline: targeted reads over dumps; summarize >50KB tool results. Rob deleted part of AppData\Local once — expect sporadic app re-logins on Connie; NEVER suggest folder deletes under AppData (rename over delete, app subfolder only).
§
Hermes↔Claude bridge LIVE: vault MCP behind nginx robblake.cloud/mcp, OAuth 2.1+PKCE; Claude Desktop connector live. Recipe: operating-hermes-gateway refs.
§
Memory governance (Rob's call): 8K cap STAYS — memory = fact + gotcha + skill pointer; procedures → skills; documents → vault. Weekly prune cron 'memory-audit-prune' (Mon 07:00 UTC). Rob prefers guardrails + receipts over trust-me; no limit bumps without prune-audit evidence.
§
Rob expects external plans vetted line-by-line against HIS environment: existing infra first, wrong-platform claims flagged, non-existent products named; verified-vs-wrong table; never adopt a doc's architecture wholesale.
§
GBrain live + MCP-wired on VPS; PGLite single-writer (CLI refuses while gateway runs), never tokenmax mode (25x cost), freshness cron nightly 03:00 UTC. Runbook: gbrain-vault-mcp skill.
§
hermes config set writes strings only — YAML lists land quoted ('["serve"]') and silently break MCP stdio spawn; fix lists via manual config.yaml edit/sed (agent patch/write_file on config.yaml is blocked by the security guard). MCP tool lists are per-session snapshots — test new MCP wiring in a FRESH session after gateway restart, else a healthy server looks broken.
§
Cowork→Hermes bridge async-only: bake 'save <name>.md to the attached folder' INTO prompts, not follow-ups. Desktop restart WIPES folder attachments — re-attach + verify per session. Inventory: vault Cowork-Workspace/_BRIDGE_STATE.md.
§
Open flag: 'Hermes' name collides with HermesInstall.com (same GHL AI-operator positioning). Trademark/domain check NOT done — internal name only; rename decision pending before paid acquisition spend.
§
Gateway notifs: restart pings silenced (telegram+discord, config.yaml); crashes never notified. Downtime watchdog cron 7f93f7b456d9 (5-min, transition-only, quiet 03:00–03:10 UTC). Runbook: operating-hermes-gateway.
§
Rob's collateral bar: claims verifiable/self-evident; discovery question beats claiming; never teach prospects their own numbers; no startup-theater naming. Work modes: content sweeps batch into a punch list (rebuild on 'go'); visual/design = rapid per-edit iteration, fresh Drive link each round, 'lock it' = final. Field-tests claims himself (5 a.m. calls), leads with witnessed evidence, loves 'free' + physical beats. Bail hooks: bondsman-vocabulary.md 'MECHANICS OF POSTING'. Flyer production: flyer-print-pipeline skill + refs/bail-vertical-2026-08-08.md (bail-bonds-vertical-playbook + ghl-voice-agent-build stale where they disagree).
§
Primary = kimi-k3 (quality; cost driver = session-bloat, not model). Rob tops up manually;
§
RRR target market LOCKED: 8 emergency verticals (bail bonds, water mitigation/restoration, emergency HVAC, locksmiths, towing/roadside, sewer/drain emergency, well pump, emergency electrical) × 7 towns: Brighton, Thornton, Commerce City, Westminster, Northglenn, Federal Heights, Broomfield (Henderson/Lochbuie dropped — too small).
§
Web design rule (Rob's call): funnel/landing pages MATCH realresultsready.com's live design system — extract tokens from prod CSS (Inter, #2563EB CTA, light hero, gold accent), never invent a separate palette; 'bail office at night' navy/amber = print flyers only. Single CTA per page, no demo-line clutter ('don't muddy the water').
§
Premium Line funnel LIVE 2026-08-10: go.realresultsready.com/bail-bonds-page → /confirmation; workflow tags premium-line-buyer + onboarding email; timer expiry + sold town → /bail-bonds-claimed-page; reopen timer manually. GHL gotchas: order form = NO custom fields (Company Name relabeled 'Agency Name'); product attaches at funnel-step Products tab; trial = days only; test = live card + instant cancel. Mobile checkout FIXED: Google Pay ON broke Stripe card embed on phones (gray boxes) — fix = Payments → Integrations → Stripe → Manage Options → Subscriptions dropdown → Google Pay OFF. Verify on restarted phone. Runbook: ghl-funnel-launch-playbook skill. Walk-in script v3 LOCKED 2026-08-10 (opener/joke/bridge/close wording) — pending patch into bail-bonds-vertical-playbook. Tracker: work/ghl/bail-field-calls-log.csv.
§
§
Rob flags jargon he doesn't know (asked what 'lede' meant) — use plain language or define inline. Gender-neutral role terms in collateral/scripts: 'bond agent,' never 'bondsman' (Rob's call 2026-08-10).
§
LinkedIn pipeline pitfall (2026-08-11, Rob caught it): media:true verification only proves AN image attached, not the RIGHT one. Thursday draft text swapped pre-scheduling but replaced draft's quote card stayed attached — near-miss. Rule: before scheduling, vision_analyze each staged card + confirm its quote derives from FINAL post text; regen card whenever a draft is replaced. social-media-content-pipeline SKILL.md is manually authored — curator patches refused; propose edits to Rob instead of self-patching.