connor
e6644d0616
Replaces the previous repo, which had split into two histories that never met (mainframe on a dead GitLab remote, the laptops on Gitea) with 146 dirty files across three machines and the NAS never enrolled at all. Branch-per-machine is gone. One main, with host differences expressed as small files under hosts/<hostname>/ rather than as branches, so there is nothing to merge. The reconciled zsh layer reduces 15-33 line forks to 1-7 effective lines per host; distro differences (oh-my-zsh prefix, syntax-highlighting path, fd vs fdfind) are probed in common/ instead. Fresh history: the old one carried six plaintext credentials, 45 MB of mail caches, browser caches and vendored binaries. 5,096 tracked files and 144 MB become 462 files and 2.6 MB. The .gitignore is now an allowlist, which is what keeps that true. Root cause of the rot: ~/.local/bin was a symlink to scripts/ with GOPATH inside it, so every go install wrote into version control (2.2 GB on the work laptop). PATH now points at the repo instead of the reverse. Also: Hyprland replaces sway and is sourced in two halves so $browser is defined before use; singleton automations carry ConditionHost= alongside host-layer-only placement; ddns moves from cron to a guarded timer; package manifests and pkg-snapshot/pkg-restore replace the X11-era install_scripts/; networkmanager-dmenu added to system76 (the binding always existed, the package never did).
1.5 KiB
name, description, metadata
| name | description | metadata | ||
|---|---|---|---|---|
| llm-work-personal-profiles | Connor's LLM stack has two profiles — work (US-gov adjacent, no Anthropic) and personal — which constrains which providers may serve which agent |
|
The LiteLLM stack serves two profiles with different permitted providers:
- Work — US-government-adjacent.
openai/*and local models ONLY. Anthropic is not an employer-approved vendor, soanthropic/*is excluded there by policy, not by preference. PRC-origin models are not formally banned by his office but should be treated as prohibited until the security office gives written approval. - Personal —
anthropic/*,openai/*, and local. zen/*is blocked for both, see zen-tos-hold.
Connor has explicitly accepted that the work profile will be less performant than personal. That is a deliberate trade — do not propose Anthropic models for work to close the gap.
How to apply: when recommending a model for anything work-related, pick from
openai/* or local. Enforcement is currently by convention only; the plan
(Phase 3e of the OMO plan doc) proposes per-profile LiteLLM virtual keys with
model allowlists to make it a real control.
Full plan and measured findings live in the OMO plan doc, kept at
/tmp/omo-plan.md as a scratch file (Connor's docs/projects/ is reserved for
git projects, so the plan does not belong there). Ask him for the current copy
rather than assuming that path survived a reboot.