graph TD
subgraph Control["Control Layer"]
Daniel["Daniel"]
ClaudeCode["Claude Code"]
GitHub["GitHub"]
GHA["GitHub Actions"]
end
subgraph VPS["VPS Infrastructure"]
Traefik["Traefik"]
n8n["n8n"]
Langfuse["Langfuse"]
Syncthing["Syncthing"]
StaffPortal["Staff Portal"]
Manager["Manager Employee"]
end
subgraph Clients["Client Containers"]
DanielPA["daniel-pa"]
MWC["mwc-content-assistant"]
OMF["omf"]
SALF["salf"]
SIP["sip"]
end
subgraph LLMs["External LLMs"]
Anthropic["Anthropic"]
OpenRouter["OpenRouter"]
Perplexity["Perplexity"]
end
subgraph Services["External Services"]
Infisical["Infisical"]
Composio["Composio"]
AgentMail["AgentMail"]
Backblaze["Backblaze B2"]
end
Daniel --> ClaudeCode
ClaudeCode --> GitHub
GitHub --> GHA
GHA --> Traefik
Traefik --> n8n
Traefik --> Langfuse
Traefik --> StaffPortal
Traefik --> DanielPA
Traefik --> MWC
Traefik --> OMF
Traefik --> SALF
Traefik --> SIP
Manager --> DanielPA
Manager --> MWC
Manager --> OMF
Manager --> SALF
Manager --> SIP
DanielPA --> Anthropic
MWC --> Anthropic
OMF --> OpenRouter
SALF --> Anthropic
SIP --> Anthropic
DanielPA --> Perplexity
MWC --> Perplexity
DanielPA --> Composio
MWC --> Composio
OMF --> Composio
DanielPA --> AgentMail
MWC --> AgentMail
Manager --> Infisical
DanielPA --> Infisical
MWC --> Infisical
Syncthing --> Backblaze
Manager --> Langfuse
Build Status
Control Layer
Done
Daniel instructs Claude Code; changes flow via GitHub and GitHub Actions to VPS.
Traefik Reverse Proxy
Done
Terminates TLS, routes all inbound traffic to internal services and client containers.
n8n Workflow Engine
Done
Runs deterministic automation workflows for clients and internal ops.
Langfuse Observability
Done
Traces and monitors all LLM calls; 30-day POPIA retention purge configured.
Syncthing + Backblaze B2
Done
File sync and encrypted offsite backup of VPS volumes.
Staff Portal
Done
Internal dashboard showing employee status and client overview.
Manager Employee
Done
Supervisor agent on VPS; monitors containers, costs, logs, and incidents.
Client Containers (hermes-agent)
Done
Isolated Docker containers per client running hermes-agent AI employees.
Infisical Secrets Manager
Done
Centrally stores and injects secrets into all containers at runtime.
Composio Tool Layer
Done
Provides client-specific tool integrations (Slack, Google, Shopify, etc).
AgentMail
Done
Email send and receive capability for AI employees.
Assessment App
Done
L1 AI readiness assessment Flask app with Paystack checkout and PDF reports.
Onyx Client Brain (SALF)
Done
Self-hosted Onyx CE RAG instance for SALF trend deck Q&A.
Complyeeze Vetting Workflow
In Progress
n8n workflow for FSCA debarment lookup and fit-and-proper vetting.
VPS Security Hardening
In Progress
AppArmor, seccomp, fail2ban, Tailscale SSH, monitoring and alerting scripts.
Financial Dashboard
Done
Xero-synced financial dashboard built and served from the VPS.