Project Control — project-control

Continue prompt

{
  "project": "project-control",
  "mission": "Operate, maintain, and evolve the automated daily project census, AI judgment, and dashboard pipeline on VM101 (project-control.timer firing daily at 03:00 UTC), executing deterministic fact collection (collect.py), health-gated agy-suro1 judgment synthesis (dispatch_judgment.py), automated continue-prompt gap filling (generate_continue_prompts.py), and mobile-first dashboard publishing (render.py served via project-control-nginx and ts-project-control Tailscale Funnel at https://project-control.tail7c7b6e.ts.net), while strictly adhering to the non-destructive propose-only governance invariant.",
  "read_first": [
    "/home/ubuntu/project-control/README.md",
    "output/census-latest.json",
    "output/judgment-2026-08-25.md",
    "/data/vault/wiki/log.md",
    "/data/vault/wiki/hot.md",
    "/data/vault/wiki/meta/project-lifecycle.md",
    "/home/ubuntu/agents-switching/ORCHESTRATOR.md",
    "/home/ubuntu/project-control/config.json"
  ],
  "verification_anchor": {
    "command": "curl -sI http://192.168.1.201:3005 && echo '---' && docker ps --filter \"name=project-control\" --format \"table {{.Names}}\\t{{.Status}}\\t{{.Ports}}\" && echo '---' && systemctl status project-control.timer --no-pager",
    "expect": "HTTP/1.1 200 OK from port 3005, 2 running containers (project-control-nginx on 0.0.0.0:3005->80/tcp and ts-project-control), and project-control.timer active (waiting, next trigger at 03:00:00 UTC)."
  },
  "project_context": {
    "what_it_is": "Automated daily project census, AI judgment synthesizer, and executive status dashboard for the VM101 fleet, deterministically collecting ground truth across 5 sources (Gitea API, local git clones with unpushed commit tracking, non-git /opt/* production deployments, Docker container topology, and Obsidian vault frontmatter), dispatching health-gated judgment prompts to agy-suro1, generating project continue-prompts, and publishing a responsive two-page dashboard via Nginx and Tailscale Funnel.",
    "domain_notes": "The pipeline runs host-side at /home/ubuntu/project-control as user ubuntu because host-level filesystem access to /opt/* deployments and Gitea APIs is required. Output artifacts (census-*.json, judgment-*.md, continue-prompts/*.json) are written to the shared disk at /home/ubuntu/agents-switching/docker/data/project/project-control/output (bind-mounted to /data/project/project-control/output inside sandboxes) so sandbox agents (like agy-suro1) can read and write them. The dashboard is rendered to /home/ubuntu/project-control/dashboard, bind-mounted read-only into project-control-nginx (port 3005), and publicly exposed via the ts-project-control Tailscale Funnel sidecar at https://project-control.tail7c7b6e.ts.net. Crucially, the system is strictly propose-only: no code path can delete or mutate project repositories; all archive and drop proposals require human review and approval recorded in wiki/meta/project-lifecycle.md."
  },
  "tech_stack": {
    "runtime_and_languages": "Python 3.12, Bash, systemd (service + timer)",
    "libraries": "urllib (stdlib HTTP client), json, subprocess, pathlib, re, datetime, markdown (Python markdown library for HTML generation)",
    "scheduler": "systemd (project-control.service, project-control.timer scheduled daily at 03:00 UTC with Persistent=true)",
    "agent_dispatch_and_eval": "Hono HTTP dispatch API on agents-switching middleware (http://127.0.0.1:3100/api/dispatch) invoking sbx-agy-suro1 (Antigravity CLI / gemini-3.7-flash-high) with health gating (agy models probe)",
    "web_and_networking": "Nginx Alpine (project-control-nginx container, port 3005), Tailscale Funnel sidecar (ts-project-control container publishing https://project-control.tail7c7b6e.ts.net)",
    "version_control_and_auth": "Git (Gitea repo dimas/project-control, deploy key id_project_control), Gitea read-only API token (project-control-read in .env)"
  },
  "current_state": {
    "summary": "M0 through M6 milestones are fully implemented and verified on VM101. The daily systemd timer (project-control.timer) is enabled and active at 03:00 UTC. The full pipeline (collect.py -> dispatch_judgment.py -> generate_continue_prompts.py -> render.py) runs cleanly, producing census-latest.json, judgment-2026-08-25.md (with structured JSON summary block for 15 fleet projects), continue-prompts for all fleet projects, and the two-page dashboard (index.html executive summary + detail.html narrative/ledger) served live at https://project-control.tail7c7b6e.ts.net. Two real lifecycle decisions (apu-assistant archived, finance-bot recategorized) have been processed and recorded in wiki/meta/project-lifecycle.md.",
    "source_of_this_status": "census-latest.json (containers, gitea_repos) + output/judgment-2026-08-25.md (§1.7) + live host inspection (/home/ubuntu/project-control, git log, systemctl status project-control.timer) + /data/vault/wiki/log.md (§2026-08-25 entries: M0-M5, Dashboard rework) + /data/vault/wiki/hot.md"
  },
  "repo_locations": {
    "vm101_host_repo": "/home/ubuntu/project-control (primary active working tree and script execution root on VM101 host)",
    "gitea_remote": "ssh://git@localhost:2222/dimas/project-control.git (internal private Gitea repository, size 49 KB, updated 2026-08-25T02:59:16Z; web UI: http://localhost:3001/dimas/project-control)",
    "shared_disk_output": "/home/ubuntu/agents-switching/docker/data/project/project-control/output (host path, bind-mounted to /data/project/project-control/output in sandboxes)",
    "sandbox_mount": "/data/project/project-control (bind-mounted in sbx-agy-suro1 and other sandbox containers)",
    "dashboard_path": "/home/ubuntu/project-control/dashboard (host directory bind-mounted read-only to /usr/share/nginx/html in project-control-nginx)",
    "public_dashboard_url": "https://project-control.tail7c7b6e.ts.net (Tailscale Funnel proxying to host port 3005)"
  },
  "key_files": {
    "/home/ubuntu/project-control/README.md": "Master architectural and operational runbook documenting pipeline components, traps, governance rules, and manual execution commands",
    "/home/ubuntu/project-control/collect.py": "Deterministic, LLM-free fact collector reading Gitea, local git clones, /opt/* deployments, Docker, and vault frontmatter into census JSON",
    "/home/ubuntu/project-control/dispatch_judgment.py": "Health-gated dispatch script probing agy-suro1 (agy models) and triggering daily judgment generation via agents-switching middleware API",
    "/home/ubuntu/project-control/generate_continue_prompts.py": "Automated script dispatching subagent tasks to generate missing project cold-start continue-prompt JSON files",
    "/home/ubuntu/project-control/render.py": "Dashboard builder compiling census and judgment data into mobile-first executive summary (index.html) and narrative detail (detail.html)",
    "/home/ubuntu/project-control/run-daily.sh": "Daily shell driver executing collect.py, best-effort dispatch_judgment.py, and render.py in sequence with strict failure logging",
    "/home/ubuntu/project-control/config.json": "Configuration defining container-to-project mappings, invisible off-VM projects, shared output paths, and browsable directories",
    "/home/ubuntu/project-control/.env": "Gitignored environment file containing dedicated read-only Gitea API token (project-control-read)",
    "/home/ubuntu/project-control/systemd/project-control.service": "Systemd oneshot service unit executing run-daily.sh as user ubuntu",
    "/home/ubuntu/project-control/systemd/project-control.timer": "Systemd timer unit triggering daily execution at 03:00 UTC with Persistent=true",
    "/data/vault/wiki/meta/project-lifecycle.md": "Obsidian lifecycle ledger tracking archive and recategorization proposals, user approval records, and delete-eligibility dates",
    "/data/project/project-control/output/census-latest.json": "Canonical latest machine-readable snapshot of fleet containers, git clones, deployments, and vault pages",
    "/data/project/project-control/output/judgment-2026-08-25.md": "Latest judgment report containing structured JSON executive block and comprehensive narrative evaluation across all 15 fleet projects"
  },
  "next_steps": [
    "Implement feedback loop in collect.py to read wiki/meta/project-lifecycle.md directly, automatically suppressing repeat drop proposals for already-archived projects.",
    "Implement alert notification mechanism (e.g. push notification or webhook) when agy-suro1 auth probe fails repeatedly, beyond the passive dashboard warning banner.",
    "Perform manual revocation of leftover temporary Gitea API token 'project-control-repo-create-temp' via Gitea Web UI (http://localhost:3001).",
    "Create dedicated Obsidian project documentation note (/data/vault/wiki/projects/project-control.md) and link it in /data/vault/wiki/projects/_index.md to resolve single-source unmapped documentation anomaly.",
    "Commit and push untracked generate_continue_prompts.py and unstaged changes in config.json and dispatch_judgment.py to Gitea repo dimas/project-control.",
    "Monitor daily systemd timer execution at 03:00 UTC to verify reliable unattended census collection, judgment synthesis, and dashboard rendering."
  ],
  "constraints": [
    "Propose-only invariant: NEVER add any archive, delete, or destructive mutation API call or script to project-control. All project drop/archive decisions require explicit human approval logged in wiki/meta/project-lifecycle.md.",
    "Standing-schedule exception boundary: The unattended daily dispatch is strictly scoped to the exact task in dispatch_judgment.py (single agent agy-suro1, fixed prompt template, single output file). Any change to agent, task, scope, or write permissions voids the ORCHESTRATOR.md standing exception and requires explicit user conversational approval.",
    "Host vs Sandbox filesystem separation: The host path /home/ubuntu/project-control must run collect.py and render.py host-side as user ubuntu; shared output files MUST be written to /home/ubuntu/agents-switching/docker/data/project/project-control/output so sandbox containers can see and write to /data/project/project-control/output.",
    "Never run `docker prune` on VM101: 13 production SCADA containers, Gitea, and agent sandboxes share the host Docker daemon.",
    "Never hardcode or commit Gitea API tokens or credentials into Git repositories or public vault pages; keep tokens in host .env.",
    "Vault frontmatter date parsing: Dates in vault YAML are naive YYYY-MM-DD strings; always parse and coerce to UTC midnight before comparing with datetime.now(timezone.utc) to prevent silent unhandled exceptions.",
    "Markdown rendering rule: Always strip YAML frontmatter using strip_frontmatter() before passing markdown to markdown.markdown() to prevent raw YAML paragraphs in rendered HTML."
  ],
  "known_staleness_warning": "The Obsidian wiki does not yet have a dedicated project documentation page for project-control (/data/vault/wiki/projects/project-control.md is missing), which was flagged as a single-data-source anomaly in judgment-2026-08-25.md. Full historical documentation and design rationale currently reside in /data/vault/wiki/log.md (§2026-08-25) and /data/vault/wiki/hot.md.",
  "handoff_metadata": {
    "created": "2026-08-25",
    "created_by": "project-control automated continue-prompt generator",
    "all_facts_sourced_from": "census-latest.json + output/judgment-2026-08-25.md + /home/ubuntu/project-control/README.md + /home/ubuntu/project-control/config.json + /data/vault/wiki/log.md + /data/vault/wiki/hot.md + /data/vault/wiki/meta/project-lifecycle.md + /home/ubuntu/agents-switching/ORCHESTRATOR.md"
  }
}
project-control

Continue prompt

Detail

Observed Signals

1. What's Left

2. Continue / Drop Suggestion

3. Dynamic Milestone Estimate
