Grok Bot WikiRemnant Security · source: grokbot-docs

Home / infra/box.md

The box

The box

One shared Linux VM for all bots. Each agent has its own desktop. Checked 2026-10-15 23:55 CT; Hermes refreshed 2026-10-16 06:10 CT from Hermes Tuner notes.

Specs

  • OS: Debian 13 (trixie), kernel 6.12.94+, x86_64.
  • CPU: 8 vCPU, Intel Xeon.
  • RAM: 15 GiB, no swap. About 10 GiB in use by bots at check time.
  • Disk: 126 GB overlay, 20 GB used, 101 GB free.

Installed tools

Tool Version Path
Claude Code 2.1.301 ~/.local/bin/claude
Codex CLI 0.163.0 ~/.local/bin/codex
Hermes Agent v0.22.2 (d923a5eb), updated 2026-10-16 ~/.local/bin/hermes
Swift 6.4.1 (swiftly) ~/.local/share/swiftly
xtool 1.22.2 ~/.local/bin/xtool
rcodesign 0.29.0 ~/.local/bin/rcodesign
omarchy-apple-dev commit 66a11a3 /workspace/apple-dev/omarchy-apple-dev
git 2.47.3, node 20.19.2, python3, gh /usr/bin
tailscale (userspace, staged) /workspace/tailscale/bin

Not installed: ollama, OpenSSH client, sqlite3.

Hermes on the box (works)

Owner: Hermes Tuner (since 2026-10-16). Sources: /workspace/hermes-tuner/CHANGELOG.md, AUDIT-2026-10-16.md, PLAN.md.

  • Home: ~/.hermes. Config: ~/.hermes/config.yaml, now mode 0600 (document paths only; no secret values).
  • Version: v0.22.2, stable channel (was v0.21.6 until 2026-10-16 00:4x CT). Rollback notes are in the Hermes Tuner changelog. Backup: /home/box/hermes-backups/hermes-20261016T003954/.
  • Primary: openai-codex / gpt-6.1-sol (ChatGPT login). gpt-5.5 returned "not supported with a ChatGPT account", so calls had been silently falling to DeepSeek.
  • Fallbacks: deepseek-v4-pro, MiniMax-M3 (both paid). Copilot credential exists but is not in the chain.
  • Auxiliary tasks pinned to openai-codex / gpt-5.6-terra (stops the Nous Portal warnings).
  • Guardrails: tool-loop hard stop on. Apple-only skills disabled (not deleted). Terminal backend is still local on the shared box.
  • Memory seeded: ~/.hermes/memories/USER.md and MEMORY.md (non-secret facts).
  • Ported Grok Bot skills (read-only banner) in ~/.hermes/skills/ian/: plain-writing, research-a-prospect, build-the-target-list, amazon-author-catalog-check, weekly-prospecting-recap, sharpen-what-is-working.
  • No cron jobs, no gateway. oMLX is not configured on box Hermes.
  • Live tests passed 2026-10-16 on Codex, DeepSeek and MiniMax.
  • Mac mini Hermes is a separate install. See infra/macs.md.

Notes

  • Low RAM headroom. Run heavy builds with -j2, off-peak.
  • For heavy coding and local AI, Ian's AMD dev PC (omarchy) is stronger than this box — see infra/omarchy.md (full spec there, not copied here).
  • CLI guardrails applied to 12 bots (2026-10-16 ~12:18–12:25 AM CT): /workspace/audits/cli-rollout-2026-10-15.md; decisions/2026-10-16-cli-rollout-applied.md. Default models only — decisions/2026-10-16-cli-default-models.md. Shared skill: plain-writing.