Many things, but also restic script

common/claude/memory/-home-connor/MEMORY.md

@@ -22,3 +22,5 @@
 - [Discuss before adding content](discuss-before-adding-content.md) — in his notes, record what he said; suggest extras in chat, add only on agreement
 - [Container storage on /home](container-storage-on-home.md) — bind mounts since 2026-10-29; overlay origin xattrs and conmon KillMode traps
 - [Caddy 2.11.6 cuts HTTP/1.1 streams at 60 s](caddy-2116-http1-stream-cut.md) — OpenCode ECONNRESET; upgraded to 2.11.7; test --http1.1 vs --http2 first
+- [Agent security plan](agent-security-plan.md) — agreed 2026-11-06 in ~/guides/mainframe; read before changing sudo, docker group, launchers or web fetching
+- [rbw add 422 on Vaultwarden](rbw-add-vaultwarden-422.md) — rbw 1.15.0 add/edit fail against Vaultwarden 1.37 (missing encryptedFor); reads work; non-tty add reads stdin

common/claude/memory/-home-connor/agent-security-plan.md

@@ -0,0 +1,19 @@
+---
+name: agent-security-plan
+description: "Agreed plan for sandboxing Claude Code, OpenCode and Hermes, hardening mainframe, and drilling restores; agreed 2026-11-06"
+metadata:
+  node_type: memory
+  type: project
+  originSessionId: 91ecb21b-604e-40e1-9420-908de11f9496
+  modified: 2026-11-06T18:13:08.400Z
+---
+
+Plan is in `~/guides/mainframe/agent-security-plan.md`. Read it before changing sudo, the
+`docker` group, Home Assistant privileges, `act_runner`, agent launchers, or web fetching.
+
+**Why:** Connor ranks damage to mainframe and credential theft as his top concerns, and
+has never exercised a restore.
+
+**How to apply:** Check the machine rather than assuming a phase has landed. SSH passphrases
+and Hermes write approvals were declined, so don't re-propose them. Rootless Podman is
+deferred for reasons recorded in the plan.

common/claude/memory/-home-connor/rbw-add-vaultwarden-422.md

@@ -0,0 +1,20 @@
+---
+name: rbw-add-vaultwarden-422
+description: "rbw 1.15.0 cannot create or edit entries against Vaultwarden 1.37 (HTTP 422, missing encryptedFor); reads still work"
+metadata:
+  node_type: memory
+  type: project
+  originSessionId: 08d4907d-b091-423a-8695-bd5ec699d8ca
+  modified: 2026-11-04T23:14:31.174Z
+---
+
+As of 2026-11-04, `rbw add` fails with `api request returned error: 422` against
+bw.rcjohnstone.com (Vaultwarden 1.37.5). The Vaultwarden log shows
+`missing field encryptedFor`. Upstream: doy/rbw issue #385, unmerged PR #386.
+`rbw get`, `list` and `sync` are unaffected.
+
+**Why:** easy to misread as a bad command or a server fault, and nothing is written.
+
+**How to apply:** check whether rbw has been updated past 1.15.0 before retrying.
+With stdin that is not a terminal, `rbw add` reads the password from stdin and
+ignores $EDITOR, so an agent shell with an open stdin hangs. Pipe the password in.