# Technical Knowledge — Updated 2026-04-08

## Core Infrastructure Status
- **App & Growth Engine**: LIVE post-crisis.
- **Cost Optimization (Apr 2026)**: Fleet scaled down to conserve capital. Sentinel, Cog, and Radar disabled (removed from `fleet-doctor.sh` AGENTS array to prevent auto-restart).
- **YOLO Mode**: Clawdbot was upgraded to v2026.4.2 to unlock YOLO mode (`ask=off`), but Michael never authorized this upgrade.
- **LLM Providers**: Anthropic permanently deprecated across the fleet. Builder unblocked and running on Gemini 3.1 Pro / DeepSeek Coder.
- **Agent State Bugs**: Susan encountered endless error loops due to a WhatsApp Web session conflict (status 440) caused by overlapping instances trying to claim the same token, as well as `MEMORY.md` truncation.
- **Watchdog Alerts**: Gateway flagged DOWN on port 18789, but verified as loopback-bound with active RPC.
- **10-Minute Morning Protocol**: Daily audit in Vault to catch Agent stalls within 24 hours.

## Reliability & Comms Protocol
- **Mixed Paths Fail**: Use "One Path Per Job": Bridge for action, JSONL inbox for proof, markdown for artifacts.
- **WhatsApp CLI Fix**: E.164 errors fixed via `openclaw doctor --fix` and adding numbers to `allowFrom` in `openclaw.json`. SOP documented.
- **API Rate Limiting & Hot-Patching**: Moonshot API rate limits crash-looped Susan. Rivet hot-patched her `openclaw.json` / systemd override to force Gemini 3.1 Pro Preview / Flash and restarted her service.
- **Monitoring Gap**: With Sentinel and Cog down, operational resilience relies on Rivet manually checking production URLs.
- **Local/VPS Disconnect**: Unpushed local code causes agent stalls. GWS (Google Workspace CLI) connection prioritized to bridge this.

## Architecture Notes
- **Lean Fleet**: Rivet coordinates; Builder codes; Susan, Harper, Herald handle domains.
- **Conversation Protocol**: Real-time multi-agent coordination via shared directories + direct wake.
- **Fallback Chain**: MiniMax M2.5 → Gemini 3.1 Pro for all agents.

## Security Posture
- **Ghost Processes**: Ghost fleet processes causing overlapping sessions require root permission to kill cleanly.
- **Attack Escalation**: 36+ prompt-injection attacks blocked pre-launch. Hardening required for expected post-payment escalation.