# STATUS.md — COO C2 lane

> Maintained by the COO-line agent (COO command-and-control chat).
> Last updated: 2026-09-07

## Scope (founder-ruled 2026-09-07, corrected same day)

- **This lane:** COO, interfacing with SVP KNEL / SVP TCTC, org buildout
  (this repo), and interfacing to the BOD. **Nothing lower than the SVPs.**
- VP-level execution lives in its own lanes: security chats (SecOps /
  SecEng), SRE chat, OAM chat. This chat routes to them via Redmine; it
  does not do their work.
- **DEFERRED:** TCTC structure — founder rules the week of 2026-09-14.
  Interface to SVP TCTC is in scope now; the division's internals are not.

## Queue — gated on the vault/box incident

Vault `pwvault` authed `/api/sync` hangs (started ~20:00 CT 09-07); same box
(152.53.37.179) hosts gitea (receive-pack 500, #937) and the my. vhost
(MySQL root@localhost leak, #939). Another chat is fixing the cloudron box.

1. File Redmine ticket for the 2026-09-07 org rulings; comment carries
   commit URLs: TSYSGroupAIOS `8eb3867` (branch ic-builder/retire-creds-
   pattern, symlink-live) + org-buildout `4669d24`.
2. Update #937 — corrected diagnosis notes.
3. Update #939 — correct attribution (public-box MySQL root leak is on
   152.53.37.179, not the cloudron box); note fix-in-flight by another chat.
4. Push blocked commits: TSYSGroupAIOS (ssh 22/29418 filtered from this
   host), org-buildout (receive-pack 500).
5. coo identity stand-up — founder-side asks open: gitea token mint
   (coo-api), Redmine + Discourse account creation, glpi admin TOTP into
   vault. Then ALL system actions switch to coo (founder directive).
6. Stand up TechOps staff identities (techops-director, techops-manager)
   once provisioning is possible.

## Inbox

- (empty)