{
  "name": "SmileIV agent policy",
  "updated": "2026-10-01",
  "hub": "https://smileiv.org/",
  "rules": [
    "Trading executor is frozen / out of scope.",
    "Do not open public SSH :22; use Cloudflare Access TCP or VPN to 10.0.0.51.",
    "Prefer live Oracle filesystem (/home/ubuntu/status, /mnt/vault) over stale project artifacts.",
    "Goose and Hermes share LiteLLM at http://127.0.0.1:4000/v1 on Oracle; Ollama is a backend, not a second catalog.",
    "Headless HTTP to Access-protected origins requires CF-Access-Client-Id and CF-Access-Client-Secret service token headers.",
    "Do not create hostname-named folders; update /home/ubuntu/status/DOMAIN_MAP.md instead.",
    "Bulky archives go to /mnt/vault/archives/ only.",
    "Acer (lilsmileiv) is home-LAN only unless VPN routes it."
  ],
  "model_bus": {
    "litellm": "http://127.0.0.1:4000/v1",
    "aliases": [
      "cf-smart",
      "cf-strong",
      "cf-fast-tiny",
      "smileyos-auto",
      "liquid-1.2b",
      "liquid-2.6b",
      "liquid-8b",
      "local-coder"
    ],
    "ollama": "http://127.0.0.1:11434",
    "public_litellm_dns": null
  },
  "ssh": {
    "oracle_access_hostname": "ssh-chi.smileiv.org",
    "hetzner_access_hostname": "ssh.smileiv.org",
    "imac_access_hostname": "ssh-imac.smileiv.org",
    "imac_user": "administrator",
    "oracle_vpn": "ubuntu@10.0.0.51",
    "runbook": "/home/ubuntu/status/AGENT_SSH_ACCESS.md"
  },
  "endpoints": {
    "policy": "https://smileiv.org/policy.json",
    "agents": "https://smileiv.org/agents.json",
    "health": "https://smileiv.org/health",
    "handoff": "https://smileiv.org/handoff"
  }
}