# Cockpit Current State

Updated: 2026-05-04 14:50 Asia/Kuwait

## Operating mode

Rocky/Hermes is the user-facing chief orchestrator. OpenClaw is now connected as an internal worker path through a bounded file-bridge loop. The loop is safe-by-default: dry-run/report-only, no secrets, no service changes, no deletion, no trading execution.

## Closed workload loop

Active scheduled jobs:

1. Daily Chief Orchestrator Report
   - Job id: a325b28023e0
   - Schedule: 07:30 daily
   - Delivery: Ali Telegram chat
   - Role: concise human-facing daily summary and approval queue.

2. Autonomous OpenClaw Cockpit Loop
   - Job id: f89a47fb2d24
   - Schedule: every 4 hours
   - Delivery: local only
   - Script: ~/.hermes/scripts/openclaw_autonomous_loop.py
   - Role: collect health, attempt bounded OpenClaw worker job unless backoff is active, update state/reports, mirror non-secret cockpit files to ROG.

## OpenClaw worker status

OpenClaw direct model-run is wired into the loop but currently unstable under long prompts / possible subscription or fallback limits.

Latest classification: backoff-active after timeout/fallback issue.

Observed failure detail:
- Router internal timeout hit after 120s.
- stderr included Ollama fallback unavailable at http://127.0.0.1:11434.
- This may be caused by Codex/OpenAI subscription/rate limits, auth/session pressure, or OpenClaw fallback routing.

Current mitigation:
- Do not hammer OpenClaw repeatedly.
- Backoff for 3 hours after timeout/rate/fallback failures.
- Hermes/tool-first reporting remains reliable.
- OpenClaw will be retried automatically by the 4-hour loop.

## Next build priority

Visual cockpit dashboard MVP:
- local first
- self-updating from cockpit state/reports/bridge files
- overview cards and drill-down links
- approval queue
- service pipeline status
- hosted on ROG LAN/private access first
- no public exposure/tunnel/port-forward without Ali approval

## Approval gates remain

Requires Ali approval:
- paid API/subscription changes
- public exposure / DNS / tunnel / port forward
- credential copying/rotation/exposure
- destructive data operations
- production service changes
- live trading
- XRP policy changes

## Hermes approval mode

Updated: 2026-05-04

Hermes approval mode has been set to `smart` in `/Users/alharbi/.hermes/config.yaml`.

Meaning:
- low-risk commands may be auto-approved by Hermes auxiliary judgment
- high-risk/destructive/public/paid/credential/production/live-trading/XRP actions remain gated by Ali approval policy
- gradual movement toward YOLO/off will be considered only after the cockpit, backup, and approval/audit loop prove reliable

## 2026-05-04 continuation after storage recovery

Ali freed Mac storage by safely removing downloaded update data and photos. Verified current Mac disk: `/` and Data have ~86GiB available; Data volume ~58% used.

Dashboard build continued and is live on ROG with pages:
- `/` overview
- `/services.html`
- `/agents.html`
- `/approvals.html`
- `/pipeline.html`
- `/reports.html`
- `/basic.html` fallback

OpenClaw usage status: direct OpenClaw Codex route produced `OPENCLAW_OK` in stdout, but the CLI failed to exit cleanly before timeout and emitted Ollama fallback-unavailable warnings. Router was patched to treat useful stdout + timeout as a partial result instead of total failure while preserving stderr for review. Continue bounded OpenClaw use with backoff; do not hammer subscription.

## 2026-05-06 Symphony-style worker queue

Rocky is now the default decider for the Symphony-style cockpit worker queue. Ali should not need to manage ticket churn. Internal tasks can be created, merged, prioritized, routed, reviewed, or marked stale by Rocky without asking unless a hard approval gate is crossed.

Added cockpit artifacts:
- `SYMPHONY_QUEUE_POLICY.md`
- `tasks/QUEUE.md`
- `state/symphony-queue.json`
- `scripts/symphony-decider.py`
- dashboard page `/queue.html`

Anti-churn defaults: max 6 worker turns, max 2 review/fix cycles, same-group concurrency 1, then Rocky must accept, narrow, or block with a short reason.