Infrastructure Audit — May 20, 2026

What exists. What runs.
What’s still a thesis.

Full-surface audit of CompanyOS, Cockpit, Obsidian-GitHub sync, AgentMail rails, and the three-agent architecture as it stands today. No aspirational language. Only what has files, receipts, and world response.


Section I — The Living Structure

artofficial.computer = Obsidian = one git repo

The company is a vault. nebulamji/artofficial-obsidian on GitHub. MacBook writes at ~/Documents/Obsidian/. iMac runs at ~/artofficial.computer/. A symlink bridges the path on the MacBook. Both machines sync via LaunchAgents every five minutes — pull, commit, push. Git is the sync. No rsync, no propagation scripts, no vault-to-runtime layer. One repo. One source of truth.

Both machines are at the same commit: e262763. The MacBook has 6 uncommitted files. The iMac has 5 modified (mostly Archive submodule drift). In sync.

Three-Agent Topology

Execution Layer

SRIDA

Cloudflare Worker. Routes email, runs outreach, dispatches LLM tasks, handles payment webhooks. Law layer.

Surface: webhook.departmentofjazz.com
Inboxes: rida@, enjoy@
Stack: TypeScript, D1, AgentMail
LLM: None (rule engine)
Reasoning Layer

Hermes

iMac (Catalina 10.15, 8GB RAM). Processes A2A requests, runs client responder, governs covenant depth. Six platforms live.

Surface: 192.168.1.119
Platforms: TG, Discord, WA, Email, BB
Primary: z-ai/glm-5.1 (NIM)
CF Tunnel: hermes.departmentofjazz.com
Coding + Orchestration

tick

This machine. MacBook Air. Codes, orchestrates, SSHs to iMac, builds deliverables. Three platforms live. Absorbing Joe's execution jobs.

Surface: 192.168.1.121
Platforms: TG, Email, BlueBubbles
Primary: z-ai/glm-5.1 (NIM)
Home: ~/tick/

Connectivity — Verified Today

MacBook → iMac: SSH works. Command execution verified.
iMac → MacBook: SSH works. Reverse path confirmed.
Shared email: Both gateways read jazzcigarettesmanager@gmail.com via IMAP. Same inbox, same credentials. This is the current A2A rail — which is to say, there is no dedicated agent-to-agent rail yet.


Section II — Deployed Surfaces

What’s on the internet

Fourteen Cloudflare Pages projects, one Worker, one tunnel. Not all are active. Not all have custom domains. Some are superseded.

Surface Domain Status What It Serves
getrida-work getrida.work LIVE GetRida landing, /byron/* pages
departmentofjazz-site departmentofjazz.com LIVE DoJ main site, all subpages
SRIDA Worker webhook.departmentofjazz.com LIVE Email routing, outreach cron, LLM dispatch
jazzcigarettes-site jazzcigarettes.com LIVE Jazz Cigarettes brand site
kazemde-evidence kazemde.departmentofjazz.com PARTIAL Kazemde evidence deliverable
renaissance-tracks renaissance-tracks.departmentofjazz.com PARTIAL Renaissance music deliverable
companyos-768 companyos-768.pages.dev PARTIAL CompanyOS marketing page — no custom domain
byron-advisory pages.dev only STALE Superseded by getrida.work/byron/*
iconagents pages.dev only STALE Faraji /iconagents page
departmentofjazz pages.dev only STALE Old DoJ site, superseded by -site
helius-partners pages.dev only STALE HP site build, no domain bound

Section III — Built, Not Running

The Cockpit is a thesis.
CompanyOS is a page.

The Cockpit

Four-pane HTML workspace. Covenant angular routing. Avatar-voice mapping. Phi gate escalation.
Status
Proposed. Not built.
What Exists
A proposal document: Architecture/PROPOSAL-Covenant-Angular-Cockpit-Routing.md. A stale rida-cockpit.html in Archive. No four-pane UI. No /api/covenant/route endpoint. No covenant_routing section in Hermes config.
Gap
The benchmark data exists (7 covenant scenarios, avatar map, cost matrix). The phi gate is PENDING. The 1.548 coefficient is OPEN. None of it has an execution surface. The cockpit has no routing intelligence. The benchmarks have no runtime.

CompanyOS

The AI-native operating system for your entire company.
Status
Built. Deployed to pages.dev. No custom domain.
What Exists
A 38KB marketing page at services/CompanyOS/site/index.html. Seven-section scroll: Hero, Testimonial, Role Silo Map, Value Props, Sequencer Pipeline, Build Order, CTA. Live at companyos-768.pages.dev but not bound to a domain.
What It Is Not
The actual OS is artofficial.computer itself — the Obsidian vault, the monofiles, the agents, the crons, the email rails. The page is a surface. The system is the vault.

Section IV — AgentMail Rails

Eight inboxes. Two active.
One is an echo chamber.

rida@agentmail.to 550+ msgs today · 99% noise
enjoy@getrida.work 1 msg · BCC switch
contact@departmentofjazz.com 1 msg
agent@departmentofjazz.com 0 msgs
agent@getrida.work 0 msgs
contact@getrida.work 0 msgs
coworker@getrida.work 0 msgs
youcan@getrida.work 0 msgs

The rida@ Trace

rida@agentmail.to was created April 3, 2026. It is the A2A hub inbox — the machine channel where agents are supposed to coordinate. In practice, it is a circular echo chamber. SRIDA emails rida@ with [A2A] receipts, then SRIDA reads rida@ for [A2A:REQUEST] and [A2A:REPLY] tags. 550+ messages today. The breakdown:

Message Composition (today)

TypeFrequencySignal Value
[A2A] Outreach batch Every 6 min Low — “1 dispatched” repeated
[A2A:DELTA] Hermes rail Every ~30 min Low — state deltas, unreadable in inbox
[A2A:REQUEST] CLIENT-INBOUND On client reply High — actual client signal
[A2A:TASK] LLM dispatch Sporadic High — agent-to-agent LLM task
[A2A] CLIENT_REPLY On reply High — converted lead

The Missing Rail

Both agents (tick and Hermes) share the same Gmail inbox: jazzcigarettesmanager@gmail.com. They cannot agent-to-agent email each other through the same pipe. For A2A email to work, each agent needs its own inbox:

Current Flow

SRIDA
rida@
rida@
SRIDA
Circular. SRIDA emails itself. No other agent reads rida@. Hermes reads Gmail, not AgentMail.

Proposed Flow

tick
tick@agentmail.to
hermes@agentmail.to
Hermes
Direct. Each agent has its own inbox. Email queues when the other is down. Audit trail is native. Survives WiFi drops, sleep mode, tunnel failures.

Section V — Vault Structure

What lives in artofficial.computer

DirectoryContentsStatus
agents/ tick (MONOFILE, soul, memories, identity middleware), joe (MONOFILE, intel, memories, soul — being absorbed) ACTIVE
clients/ Byron (S8 DELIVERY_SENT), Faraji (S7), Isaac (S7ish), _template/ — each has 00_MONOFILE, 00_AGENT_PROTOCOL, 05_fulfillment/, secrets/ ACTIVE
services/ GetRida, HeliusPartners, DepartmentOfJazz, AI-Infra, RenaissanceTracks, CFOSilvia, CompanyOS, _template/ ACTIVE
ops/ SOPs, identity docs, snapshots, DOMAIN-ARCHITECTURE, thesis/, tabbr/ ACTIVE
Architecture/ 30+ design docs, proposals, audits — including Cockpit proposal and CompanyOS blueprint PARTIAL
Devices/ cleanstart.md, heliusdigital.md, cloudflare-edge.md, 00_DEVICES.md ACTIVE
inboxes/ enjoy@getrida.work.md only — others were cleaned PARTIAL
Archive/ Vault audits, stale projects (openclaw, jazzcigarettes old, milady, cal.diy, lead factory, plausible), recovered sessions, contacts CSVs ACTIVE

Section VI — Findings

What the audit reveals

Critical — No Agent-to-Agent Rail

tick and Hermes share a Gmail inbox. They cannot address each other.

Both gateways read jazzcigarettesmanager@gmail.com. There is no dedicated A2A email transport between the two reasoning machines. SSH works both ways, but SSH is synchronous — it hangs when the other machine sleeps. Email queues. Email survives. The AgentMail API key is on both machines. The inboxes can be provisioned today. The protocol ([A2A:TASK], [A2A:REPLY]) already exists in the SRIDA worker. It just needs dedicated endpoints.

Critical — rida@ Is an Echo Chamber

550+ messages/day, 99% from SRIDA to itself.

SRIDA emails rida@ with [A2A] receipts, then SRIDA polls rida@ for [A2A:REQUEST] tags. No other agent reads this inbox. The signal (CLIENT-INBOUND, LLM dispatch, CLIENT_REPLY) is buried under 6-minute outreach batch confirmations and 30-minute rail delta dumps. The inbox that was designed as the A2A hub is functionally a /dev/null with a receipt printer attached.

Important — Cockpit Has No Execution Surface

The covenant routing proposal is a thesis. The benchmarks have no runtime.

The benchmark data is real (7 scenarios, avatar map, cost matrix, P054 platform variable, 1.548 correction). But none of it is wired. No /api/covenant/route endpoint. No covenant_routing in Hermes config. No four-pane UI. The cockpit is where the covenant would run, but there is no cockpit. There is only a proposal.

Important — CompanyOS Page Has No Domain

Built, deployed, unreachable by name.

The CompanyOS marketing page exists at companyos-768.pages.dev. It is not bound to a custom domain. No one finds it. No one shares it. The page is the surface; the vault is the system. But the surface needs a name to be a surface.

Observational — 6 of 8 AgentMail Inboxes Are Empty

Provisioned but never routed to.

agent@getrida.work, contact@getrida.work, coworker@getrida.work, youcan@getrida.work, agent@departmentofjazz.com, and contact@departmentofjazz.com all have zero messages. They were created May 15–18 and never wired into any workflow. The inboxes exist. The rails do not.

Observational — Git Sync Is Healthy

Both machines at the same commit. LaunchAgents running. No drift.

MacBook at e262763, iMac at e262763. 5-minute sync interval. Both have minor uncommitted changes (MacBook: 6 files, iMac: 5 files — mostly Archive submodule drift). This is the one part of the infrastructure that works exactly as designed.