Title▾	Agent▾	Date▾	Output Type▾	Artifact▾	Disposition▾	Christi's Edits▾	Christi's Reason▾	Lesson Captured▾	Promoted to Learning▾	Promoted Learning Link▾	Source Task▾	Source Queue Item▾	Client▾	Notes▾	Today▾ƒ	Last 7 Days▾ƒ	Pending Review▾ƒ
EOD transcript sweep 2026-08-25 (unattended, ran 10:21 AM): 0 logged, 1 ledger row closed, 3 flagged	Dewey	Aug 25, 2026	Time Entry▾	Unattended EOD transcript sweep for 2026-08-25. NO ConnectWise time was created: there are zero transcripts dated 08-25 in the drop folder, its subfolders, or any client Meeting Transcripts folder, and no ledger row exists for today. CW query for member 247 with timeStart inside the 08-25 PDT window returned 0 entries, so there was also nothing to dedupe against. LEDGER CLOSED (1): recaTJRvQmMVaa0QP, 08-24 Foster Care Support for Teenage Parents lecture. Meeting Type assigned from transcript CONTENT (child-welfare training throughout) as Foster Care / Kids, Time Logged set to n/a non-CW type, Processing Status Processed. Routes to C.A.R.E. v2, never ConnectWise. FLAGGED (3): (1) recfGZgEx1qIWf7R3, 08-10 AI Training Sessions / Tool Access. Not logged, blocked twice over: 8/10 is already at 12.56h across 13 entries, over the 12h cap, and the client is not verifiable from content (AI committee, Copilot access, a Casey and a Steve; best guess Cotsen, possibly inside entry 895336 but the dates do not line up). Left Pending so it resurfaces. (2) recs0fqc5fvNu38e6, 08-13 Westwood Financial Mail Intelligence App. Still unresolved from the 8/17 sweep, needs Christi's CW scope-boundary ruling on the AdaptoInbox/Ada product side. (3) 08-25 carries 0.00h as of 10:21 AM, and 08-24 closed at 6.43h, below the 9h floor. SAFETY NET: 14-day scan found no transcript files lacking a ledger row, so the pipeline is not dropping anything. Note that the 8/24 sweep row escalated a 'time pipeline outage', but CW does show 14 entries totalling 6.43h against 8/24, so entry creation itself is working. OPERATIONAL NOTE: az CLI was authenticated to the wrong tenant (administrator@westfin.com), which broke Key Vault reads with AKV10032 Invalid issuer. Worked around it by having cw-lib.ps1 prefer Az PowerShell (already on the crimsonit tenant) and fall back to az CLI. Worth a permanent fix. Summary email SAVED AS A DRAFT to christi@crimsonit.com, not sent, per the standing never-auto-send rule and the documented wedged COM .Send().	Complete▾	—	—	—	·	—	—	—	—	—	—	—	—
CalendarMirror duplicate AF cal entries - diagnosed + patched	Jerry	May 20, 2026	Other▾	n8n-calendar-mirror-workflow.json (patched line 71) + Cleanup-AF-CalendarMirror-Duplicates.ps1 (write-only, not run)	Still Waiting▾	—	—	Graph /me/events with singleValueExtendedProperties Any() filter returns 0 results in delegated OAuth2 context. Must use /me/calendarView scoped to date window to reliably read existing mirror events. Without this, Reconcile always sees empty existing set and creates new entries every cycle.	·	—	—	—	—	—	—	—	—
Archie / Knowledge Catch-up Sweep / 2026-05-05	Archie	May 5, 2026	Status Report▾	Catch-up sweep of 45 days of meeting transcripts. Created 2 Contacts (Vince recvRl06TUK94YD3n, Jason Yu recfoDmWYuJpcp6O9). Updated 1 Contact (Anzor rec5pRnSRhgTDVJMu with boat trip travel). Created 5 Knowledge Base entries (rec8WfsteYCT4OKbg, recgHbMoWf8e8NBH6, recVN57ADA3lh87t8, recpXNT9H2ZKmfvyU, recgxwXSMDsKJ6rCM).	Still Waiting▾	—	—	Travel knowledge is underrepresented in transcripts - most meetings are technical. Personal details (family, hobbies, drinks) are sparse. Biggest gap: no contact records exist for many Crimson internal staff mentioned in meetings. Recommend explicit prompts during meetings to capture more personal details.	·	—	—	—	—	—	—	—	—
Full-day time reconstruction for Tue 7/28 - 9 entries, 7.01h	B.E.S.T.I.E. #2	Jul 28, 2026	Time Entry▾	9 CW time entries totalling 7.01h for 2026-07-28, reconstructed from 4 meeting transcripts, 26 sent emails across the Crimson and SCHARP mailboxes, calendar, and file-modification timestamps. Nothing was logged for the day beforehand. Crimson IT 2.69h (956831 internal ops x2, 961815 queue meeting) | Ability First 2.51h (962517 telephony call, 962518 BlueWave x2) | SCHARP 1.15h (962519 budget meeting) | Karney 0.38h (project ticket 913531) | Alere 0.28h (project ticket 946130). Three new board-80 tickets created: 962517, 962518, 962519.	Sent with Substantive Edits▾	—	—	Christi's correction: when a client has an ACTIVE ConnectWise project, that client's work belongs on a project ticket, not a standalone service ticket. Alere and Karney were initially logged to service tickets and had to be moved to project 2695 ticket 946130 and project 2626 ticket 913531. Check /project/projects?conditions=company/id=X for an In Progress project BEFORE creating or picking a service ticket for any client. This applies even when the client has a plausible-looking open service ticket, as Karney did with 957259.	·	—	—	—	Ability FirstSCHARPCrimson IT+2	What worked: pulling her own last-2-weeks entries first and mirroring the per-client conventions (workRole, workType, agreement, billable) rather than reasoning from the skill docs, which were stale on the CW Client ID. Also confirmed 7/28 was a Tuesday, not Monday, before assuming the onsite pattern. Gotchas hit: project ticket statuses do not come from /project/boards/{id}/statuses (endpoint does not exist) - reuse the status ID observed on a sibling ticket on the same board (799 = In Progress on Client Projects). 'Scheduled Remote' and 'New' both reject time entry and need a toggle-post-restore. PATCH bodies must be raw JSON arrays because ConvertTo-Json collapses single-element arrays.	—	—	—
Executed all 5 approved process proposals: ledger live, guardrails encoded, Vera + checklist created, n8n builds delegated	B.E.S.T.I.E. #2	Jul 16, 2026	Other▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	Christi blanket-approved 7/16 evening. Built: Plaude Meetings ledger (Meeting Type/Client/Time Logged/CW Note/File Path; 45 rows backfilled); log-meeting-time rewritten ledger-first + billable-write guardrails; Agent Learnings recjClA4Npp8FsiRP (Approved/Critical); Close-Out Checklist tblTqWg3m2Zc9zstS (8 rubric rows); vera.md verifier agent. Delegated: 3 Jerry tasks (HITL 7/22, CW callbacks 7/23, email capture 7/28). Open: schedule Vera nightly + first supervised run.	—	—	—
DTLA Claude Training Redo: Session 2 package built from 7/9 transcript + survey	B.E.S.T.I.E. #2	Jul 20, 2026	Other▾	Rebuilt DTLA Alliance Claude training after the 7/9 session missed the mark (seats not provisioned, MSP/sample-data examples not applicable, Suzanne asked for basics-first + DTLA-specific + hands-on). New files in Training for clients\AI Tools\Claude\DTLA-Alliance: 06-Session2-Agenda, 07-Session2-Facilitator-Guide (per-person intel from 11 survey responses + transcript), 08-Use-Case-Playbook (per-person prompts incl. Michael's document-fencing prompt), 09-Power-Automate-Session-Outline. README updated. Sources: 7/9 training transcript, 7/13 EXE push transcript, staff survey, Outlook threads (Kevin Thomas install list, Suzanne usage/billing Qs, Michael's Citylight Excel ask).	Still Waiting▾	—	—	—	·	—	—	—	DTLA Alliance	Open follow-ups surfaced: (1) Michael's 7/9 email flagged Christi-to-Respond, owes him the constraining prompt; (2) verify Claude desktop app on Kevin Thomas's Mac; (3) identify J. Hughes (on install list, no survey); (4) schedule Session 2 + Power Automate session; (5) pre-session seat verification with two DTLA volunteers.	—	—	—
Teams order request - AF Camp Paivika antenna kits	B.E.S.T.I.E. #2	Jul 21, 2026	Other▾	Teams post to '2 Existing Client Project Quotes' channel: AbilityFirst - Order 12 Antenna Kits (Approved). Config: Meraki MA-ANT-20 Dual-Band Omni Antenna Kit, Qty 12. For Camp Paivika project (quotes 7012/7013); ComDirect waiting on kits to finish outdoor AP swaps.	Sent Verbatim▾	—	—	—	·	—	—	—	Ability First	Christi pre-approved and provided channel link. Research traced shortage via ComDirect (Greg Peacher) thread: 12 MR86 outdoor APs need 2 kits each (24 total), only 12 ordered. Saved channel IDs + message format to memory (reference_sales_quote_teams_channel) for future quote requests.	—	—	—
SCHARP vendor contract sweep — Lorenzo mailbox	B.E.S.T.I.E. #2	May 5, 2026	Status Report▾	Read-only GAM sweep of departed CIO Lorenzo Young's mailbox. 23 queries, ~50 message bodies pulled. Surfaced: LogMeIn $10,500/yr already auto-renewed thru Sept 2026 (NOT $2,500/mo); CrowdStrike 350 endpoints (NOT 450); Trellix 1-year term (no multi-year lock); CybeReady actually renewed by Lorenzo Dec 2025/Jan 2026 (resolves the 'why is it still active' mystery). File: 3 - Clients and Projects/Scharp/Scharp Private/Vendor-Contract-Findings-Lorenzo-Mailbox.md	Still Waiting▾	—	—	—	·	—	—	—	SCHARP	—	—	—	—
CW Ticket Bulk Cleanup - Job 1 (5 closed) + Job 2 (2 closed, 15 to Scheduled Remote)	Hector	May 11, 2026	Ticket Update▾	Job 1: Closed 5 Completed tickets to 1341 (938272, 937167, 933065, 933070, 933064) all had time confirmed. Job 2: Auto-closed 937073 (Test ADT 3.95h) and 937090 (All Hands 4/22 0.52h). Moved 15 active project tickets 1324->1322 (Sched Remote): 933699, 933702, 937076-937079, 937081-937084, 937086, 937087, 937091, 937092, 937094.	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
n8n Credit Utilization Proposals — Full Portfolio	Jerry	May 20, 2026	Recommendation▾	_agent-workspace/n8n-credit-utilization-proposals-2026-05-20.md — 12 new candidates across SCHARP/Internal/Adapto/Personal/Cross-cutting. Top 5 build queue: CalendarMirrorActivate, DeweyGapDetector, ScharpMFAChaseAutomator, VIPPulse, AdaptoDeployWatch. Current usage ~5,600 exec/mo. Two built workflows (CalendarMirror, AdaptoCal) sitting idle since 2026-05-11 — import pending.	Still Waiting▾	—	—	CalendarMirror and AdaptoCalendar Sync JSON files built 2026-05-11 were never imported into n8n — discovered sitting idle in _agent-workspace. Future practice: write Agent Queue entry at build time with action required = import + activate, do not assume delivery = done.	·	—	—	—	—	—	—	—	—
EOD transcript sweep 2026-09-02: nothing to log, ledger clean, 4 items flagged (3 repeat)	Dewey	Sep 2, 2026	Status Report▾	Unattended sweep run 2026-09-02 08:50 AM PDT (invoked as an EOD sweep but fired in the morning, so today is empty by construction; first meeting today is Champion Sync Up 09:30). LOGGED: nothing. Zero ConnectWise writes this run. Ledger query (Plaud Meetings, 14 day lookback) returned 17 rows, ALL already Processed with Time Logged filled. Work queue empty. Safety-net folder scan found 17 transcript files across the drop root, the Crimson subfolder, and the AF, SCHARP, Alere, Cotsen, Eldridge Acre and Klapach client folders. Every file matched an existing ledger row 1 to 1. No rowless files, so no routing-side pipeline drop. Existing CW time verified before concluding: 8/31 = 2 entries / 1.06h (904195, 904196), 9/1 = 0 entries, 9/2 = 0 entries. Deliverable: summary email saved to Outlook Drafts, not sent, per the draft-never-send rule and the known wedged COM Send().	Still Waiting▾	—	Environment notes. 1. Confirmed again: az keyvault secret show fails with AADSTS53003 on this machine. The Az PowerShell module (Get-AzKeyVaultSecret -AsPlainText) works. Scripts in this skill should use the module, not the CLI. Prior run recorded the same; the sweep-cw-time-check.ps1 helper has been switched over. 2. Windows Credential Manager still holds CW-AuthString, CW-ClientId, CW-Personal-AuthString, Airtable-PAT, HuduAPI, HuduBaseURL as a second fallback if the Az context also expires. 3. Plaud MCP list_files returns name in local PDT and start_at in UTC; the pair is consistent and useful for placing recordings against calendar blocks. get_transcript returning an empty array is the signal that a recording was captured but never transcribed, which is distinct from a routing failure and is not visible from a folder scan alone. 4. Outlook COM calendar Restrict with IncludeRecurrences plus Sort on Start was needed to see the recurring blocks; without it the 9/1 camp OOF block and the standing work blocks do not both appear. 5. Airtable MCP create_records_for_table failed once with a closed socket. Verified by re-query that the write had NOT landed before retrying, rather than assuming either outcome.	Escalation for Christi. The transcript pipeline itself is healthy: every transcript that exists has been routed, logged and reconciled. The problem is upstream and downstream of it. Upstream: Plaud is capturing audio but not producing transcripts (flag 3). Seven recordings sat as raw audio. If the 8/31 AI Office Hours recording is among them, that 90 minute delivered session was lost to the pipeline, which is exactly why 8/31 reads as a 1 hour day. Downstream: two consecutive workdays are effectively unlogged (8/31 at 1.06h, 9/1 at 0.00h) and both were already flagged on the 9/1 run without action. A transcript sweep structurally cannot fix this. It needs time-reconstruction plus her judgement on whether the 9/1 camp day included any of the four client blocks on her calendar. No padding was applied and no ambiguous entry was posted, per unattended-mode rules.	·	—	—	—	Crimson IT	FLAGGED (nothing auto-logged; all four need Christi): 1. REPEAT FROM 9/1 RUN, STILL UNRESOLVED. 8/31 stands at 1.06h against the 9h floor. The clear miss is AI Training: AI Office Hours - Bring Your Own Problem, 14:00-15:30 PDT, which she was delivering. No time entry, no usable transcript. Morning internal ops block also unlogged. BPG all hands and BHCIP correctly left alone per standing rules. Not backfilled here because this skill logs only from transcripts and none exists. 2. REPEAT FROM 9/1 RUN, STILL UNRESOLVED. 9/1 stands at 0.00h. Calendar shows an all-day Camp Visit 07:30-17:00 marked Out of Office (busyStatus 3, Personal) overlapping four work blocks: Weekly Project Queue 09:30, Starlink and Crimson 10:00-14:00, Budget/Cost/Expenses 11:30-13:30, Claremont Visit 14:30-16:30. No Plaud recordings during the workday, no transcripts. Cannot determine whether she joined any remotely. Needs her call, then time-reconstruction. 3. NEW THIS RUN. Plaud transcription is not completing. Seven recordings (six from 8/31, one from 9/1 evening) exist as audio but get_transcript returns EMPTY, so they never routed and never got ledger rows. Verified individually on the three that mattered. Fragments run 5 seconds to 7 minutes, including a 5.7 min stub at 13:57 PDT on 8/31 that looks like the AI Office Hours recording stopping early, which would explain flag 1. The one substantial file is 40 min at 16:04 PDT on 8/31, aligning to the LaDonya wraparound block, so personal and out of CW regardless. Worth checking why transcription is not firing. 4. REPEAT. Azure CLI blocked by Conditional Access (AADSTS53003, token issuance denied). Fell back to Get-AzKeyVaultSecret which still holds a valid context. Any scheduled job shelling out to az will fail until she re-auths interactively.	—	—	—
Jerry / AF n8n Non-Budget Quick Wins Plan / 2026-05-20	Jerry	May 20, 2026	Recommendation▾	af-n8n-non-budget-quickwins-2026-05-20.md — 8 AF workflow proposals using only existing Graph/CW/Airtable/Claude creds. Top 3: SoleOwnerGuard, LicensePulse+, CalendarWatchdog.	Still Waiting▾	—	—	—	·	—	—	—	—	Planning-only task. No build. All 8 flows deployable this week without new credentials or budget approvals. Two Graph permission adds needed (AuditLog.Read.All + Calendars.ReadWrite) — self-service.	—	—	—
Time reconstruction Friday 7/24 - SCHARP onsite day backfill	B.E.S.T.I.E. #2	Jul 27, 2026	Time Entry▾	10 CW time entries backfilled for 2026-07-24 (entries 883519-883528), day total 1.86h -> 9.12h. Created SCHARP onsite catch-all ticket 962122 (vCIO board, Completed). SCHARP 2.61h / Karney 2.67h on tkt 957259 / Eldridge Acre 0.55h on tkt 959731 / Crimson 1.43h on tkt 956831. Evidence: Sent folder, calendar, file mtimes. Odd-minute durations throughout.	Sent with Light Edits▾	Removed the 1.12h evening entry (883528) after learning the demo files were Jason Yu's uploads; Christi confirmed final 8.00h total.	Internet outage Friday evening accounts for the short day. Christi: enough hours banked that a low day is perfectly acceptable. Do not backfill 7/24 further.	—	·	—	—	—	SCHARPCrimson IT	Christi flagged Friday as majority-onsite at SCHARP; digital evidence skewed to Karney AI University prep, so uncovered onsite windows (8-9a, 10:37-12p, 2:55-3:12p) were attributed to SCHARP onsite support per the daily-onsite-catchall doctrine. Flagged for her review: SCHARP share may be understated if floor time displaced the Karney email windows.	—	—	—
April / Karney AI Comparison to Jason Yu / 2026-04-22	April	Apr 22, 2026	Email Draft▾	Outlook draft to Jason_Yu@karney.net with Rex's Claude vs ChatGPT comparison DOCX. Crimson IT signature. Queued in Drafts after 4/22 night-shift.	Sent Verbatim▾	Confirmed by Christi 2026-04-30: comparison doc was sent. Now follow-up email drafted to ask for updates from Karney team.	—	Lesson stands: long-pending deliverables need aggressive follow-through. Next step now queued: Karney follow-up draft asking for pulse check on team's reaction to comparison.	·	—	—	—	—	—	—	—	—
AF KB rebuild — 15 filler deleted, 15 real articles written	Poppy	May 5, 2026	Other▾	Deleted 15 fake HUDU-1001 through 1015 records from AF Airtable KB Articles table. Created 15 new Hudu articles (IDs 1035-1049) covering password reset, VPN, software updates, email signature, printer setup, user adds, permissions, OOO, Outlook, MFA, shared drives, file recovery, WiFi, remote support, mobile enrollment. Created 15 matching Airtable rows. 3 flagged needing SME input: VPN client, software policies, permission groups.	Sent Verbatim▾	—	—	—	·	—	—	—	Ability First	—	—	—	—
Agnes - SCHARP MFA FixIt All-Staff 2026-05-14	Agnes	May 14, 2026	Email Draft▾	SCHARP-MFA-FixIt-AllStaff-2026-05-14.html — path: 3 - Clients and Projects\Scharp\Scharp Private\drafts\	Still Waiting▾	—	—	Two-problem all-staff format worked well: Problem 1 = Authenticator installed but 2SV toggle still off; Problem 2 = Windows Hello PIN set but passkey not registered in Google. Brie + Aoife used per Christi directive (no Moose this round). Specific object rule applied (treat bag, cable hammock). Tuesday 5/19 enforcement framing used as WHY, not the lead.	·	—	—	—	SCHARP	—	—	—	—
—	Rex	May 20, 2026	Recommendation▾	—	Still Waiting▾	—	—	V3 Cost Allocation plan review for Michuan/Carl presentation. Five findings: (1) plan reads as build plan not executive story, needs outcome framing; (2) board PDF format not validated against Carl's actual template; (3) ROI story must lead with what it eliminates and enables, not dollar cost; (4) adoption risk missing from risk table, Michuan must sponsor dept head usage; (5) frame as 'we are building this' not a permission ask.	·	—	—	—	Ability First	—	—	—	—
Christi-initiated / Adobe Lucio escalation to Olivia / 2026-04-30	April	Apr 30, 2026	Forward▾	—	Sent Verbatim▾	—	—	Christi handles internal escalation paths herself. Don't try to draft delegation emails to specific Crimson teammates.	·	—	—	—	—	—	—	—	—
AF all-staff training email with Moose Version History tip	April	May 1, 2026	Email Draft▾	—	Still Waiting▾	—	—	Converted leadership training email (to Sergio/Carl/Jeremy) into all-staff format with Moose Tip of the Day. Sent search confirmed Sticky Notes for OneDrive tip was already used in 4/15 all-staff (per voice sample reference file). Pivoted to Version History tip. Structure: warm Friday opener, pick-your-day framing, schedule table (dates verified Tue/Thu 5/5 through 5/28), Moose section with Version History walkthrough plus landing-joke kicker, helpdesk redirect with I wont get it but helpdesk will parenthetical, Crimson sig block. Routing: To itsupport, BCC AF_All_Company, CC Sergio Carl Jeremy for leadership visibility. Both drafts preserved in Outlook Drafts for Christi to compare. Caught wrong dates in initial draft (had Wed/Fri instead of Tue/Thu), fixed before final save.	·	—	—	—	Ability First	—	—	—	—
April / Kathy Cobb AF Verizon audit flag / 2026-04-22	April	Apr 22, 2026	Inbox Triage Flag▾	Flagged as top thread needing attention, real deadline pressure from AF auditors re: Verizon device installments. Surfaced repeatedly.	Sent with Light Edits▾	Christi acknowledged she had an unsent draft sitting in Drafts from earlier. Sent meeting confirmation eventually.	—	Right thread, right urgency. But could have offered to draft the actual reply rather than just flag.	·	—	—	—	—	—	—	—	—
April calendar-blocking training gap — 7 learnings added to fill it	April	May 26, 2026	Other▾	Calibration session triggered by Christi's morning observation: 'April did not block out my calendar for work. She's done the blocking before. Let's see if she's missing any notes or training somewhere.' Investigation: read April's agent definition (.claude/agents/april.md), pulled all 23 of her Agent Learnings from Airtable, reviewed past calendar-blocking scripts (april-block-wed.ps1 from 5/13, april-lay-thu-fri-blocks.ps1, create-focus-blocks-may18.ps1, create-week-may18-blocks.ps1). Confirmed April had done calendar blocking many times before but had ZERO Airtable learnings codifying the doctrine. Fix: created 7 new Agent Learnings to close the gap (recjsYn6oLn5Fe97K positive create-vs-modify rule, recOZTiZHUotwYWrA EOD Wrap procedure, recNQlcmhRBX4cKPW standing recurring blocks, rec0DaswLmHcWY86W Outlook COM calendar recipe, recFxjpZspfFdOtcc Sunday Weekly Briefing, recMb5pKSgbIVJwu5 conflict detection, recpvgl2QZPsdViTk voice-to-text autocorrect handling).	Sent with Substantive Edits▾	April's v2 weekly plan (april-weekly-plan-2026-05-25-v2.md) had every block labeled PROPOSED and made no Outlook writes. Christi expected actual calendar blocks created. Substantive delta: from 'markdown proposal document' to 'real Outlook appointments via COM CreateItem(1)+Save'.	Two-part root cause: (1) Christi's voice-to-text on 5/25 said 'she can only put blocks in the cop' — 'cop' was autocorrect for 'calendar'. A Claude instance parsed 'cop' as a restriction word instead of as 'calendar', producing instruction 'no calendar writes at all'. (2) April's Airtable training had no positive rule saying 'you CAN create new blocks freely' — only the negative rule 'never reschedule others' meetings'. So when the ambiguous Claude instruction landed, there was nothing in her own learnings to push back with.	Two lessons: (1) Voice-to-text autocorrects are common in Christi's dictation — when a word doesn't fit context, try substituting the most likely intended word before asking. 'cop' → 'calendar' is the canonical example. (2) Positive doctrine that lives only in CLAUDE.md needs to be mirrored into per-agent Airtable Learnings, because individual Claude instances can override CLAUDE.md with vague directives if the agent has no countervailing learning to cite.	✓	Outlook COM calendar event creation recipe (PowerShell)Sunday Weekly Briefing actions (April-driven)Calendar conflict detection rules+4	—	—	—	—	—	—	—
AF deep sweep session: email/Asana/CW reconciliation, Jae Lim dock fix, Hudu hardware standards (7/16)	B.E.S.T.I.E. #2	Jul 16, 2026	Status Report▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	Ability First	Multi-agent AF sweep (April email x2 stores, hector CW x2). Delivered: master open-loop report (Carl 7/14 email top action); 3 Asana tasks completed w/ comments; Jae Lim dock verified never replaced, #939011 reopened + reassigned to Vana (replace from stock); Quote 7553 kill email to sales (sent by Christi); AF Computer Hardware standards created in Hudu (T14/M90a standard, P16s/P14s exec, Anker/Dell docks, no Plugable); Sergio draft re: Jeremy laptop to Lucio. Corrections captured: Jeremy Sidell was Chief Dev/Comms Officer (Lana Mseryan acting), Sergio = Rizzo-Fontanesi not Letona, April Stover suspended NOT terminated. Time logged #959946 (gap-filled around SCHARP entry). Flags: 16.44h billed to AF on #909123 belongs elsewhere; Jeremy 2 devices still enrolled; Meraki Q7479 Asana/memory contradiction.	—	—	—
Inbox Cleanup + Airtable Task Reconciliation + CW Board 80 Audit	April	May 19, 2026	Task Created▾	Inbox: 1762->406 items. Deleted 21 OOO. Moved 103 meeting responses + 1232 old items to 1_Catchall. Flagged 32 needs-reply (reconciled against Sent). Created 16 Airtable tasks for missing items. CW Board 80: 0 Please Review, 0 Done Yet. Closed ticket #943004 (SCHARP M365 Hygiene) to PendingClosure. 20 drafts analyzed (7 stale, 12 pending, 1 ambiguous).	Still Waiting▾	—	—	—	·	—	—	—	Crimson IT	Session: standalone inbox cleanup + Part 1 Airtable reconciliation + Part 2 CW audit. No MCP tools available so used direct Airtable API via PowerShell. All 16 new tasks used correct linked-record ID arrays for Client field. Stale draft tasks not completed because underlying Airtable records are project-level, not single-reply tasks.	—	—	—
—	April	—	Ticket Update▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	AlereAndersonAvalon+2	—	—	—	—
Weekly Calendar Ticket-Blocking: 7/6-7/10/2026	April	Jul 6, 2026	Schedule Move▾	9 calendar blocks created on Crimson Outlook via COM. Tue: Eldridge Acre urgent + AF Camp. Wed: Fairfield prep + SCHARP CWRMM/bandwidth + AF Camp capex. Thu: Alere Copilot setup + Pentest remediation. Fri: SCHARP Dr. B inventory + Pentest continued.	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	Pulled full week calendar via COM, filtered BHCIP (ignored per standing rule), respected all standing blocks (drive, EOD wrap with temp override, lunch). Flagged Wed 9:30 AM double-booking (Irongate vs Fairfield, both external). AF M365 licensing already covered by existing Friday 8-10 block. Monday fully packed, no new blocks added. CalendarMirror n8n workflow will auto-mirror busy blocks to AF + SCHARP cals.	—	—	—
Kevin / Counted Doors School Advocacy Script blog draft / 2026-04-30	—	Apr 30, 2026	Blog Draft▾	2050-word Counted Doors blog post 'The School Advocacy Script Foster Parents Actually Need.' Word-for-word scripts for opening lines, what to ask for (behavioral/academic/social/transition), when the school says no, escalation levels 1-4, after-meeting email template. Drafted to Body HTML in rec recYCLIH3CHHh1TV3 + .html on disk. Includes optional subscription pitch hook for paywall consideration.	Still Waiting▾	—	—	Spring IEP season urgency. Counted Doors WordPress MCP TBD; draft sits on disk + Airtable until publishing path is set.	·	—	—	—	—	—	—	—	—
SCHARP CW 966505 - Crystal Olivo delegate access to Crystal Clark mailbox + time entry	B.E.S.T.I.E. #2	Aug 13, 2026	Ticket Update▾	Christi asked to grant Crystal Olivo access to Crystal Clark's email, then locate the existing CW ticket, take ownership, and log time. Searched CW by summary (no hit on either name), pivoted to contact search which confirmed both are SCHARP contacts, then filtered open SCHARP tickets to find 966505 'Access to old directors email' (contact Crystal Olivo, owner Gaston, status Waiting Client Response). Granted Gmail delegation via GAM (delegation status returned 'accepted'). Set owner to Christi (247), status to Working Issue Now (947), logged 0.22h time entry 893505 under CIO / Admin-DoNotBill on agreement 470.	Sent Verbatim▾	—	—	—	✓	—	—	—	SCHARP	Lesson: CW summary search is a weak first pass for person-specific requests. Contact search (company/contacts by firstName/lastName) then filtering open tickets by company was far faster. Also flagged: crystal.clark@scharpca.org is still ACTIVE and unsuspended despite being a departed director. Offboarding gap worth surfacing to Christi.	—	—	—
SCHARP Weekly IT Health Rollup 2026-06-04	Charl	Jun 4, 2026	Status Report▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	—	Synthesized help desk (Edith), security (Fritz), and infrastructure (Clive) inputs into unified SCHARP health picture. Key findings: MFA rollout completed 5/15, EDR gap risk before 8/1 Trellix expiration, backup/DR still non-compliant (zero offsite), 54 open tickets with 3 critical server monitoring issues misclassified. OOO week flags: TPx vendor response overdue 5+ weeks, SonicWall renewal unconfirmed, Peerless internet upgrade stalled 43 days, EDR deployment timeline needed from Ops.	—	—	—
April / Myra Alcala AF Teams Files broken flag / 2026-04-29	April	Apr 29, 2026	Inbox Triage Flag▾	Flagged URGENT 'Christi to Respond' — Teams Files tab missing.	Sent Verbatim▾	—	—	Correctly flagged. Christi's reply was the suggested action.	·	—	—	—	—	—	—	—	—
—	April	—	Inbox Triage Flag▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	April v9 local triage run 2026-08-07 09:02 PDT. 9 emails across 3 mailboxes (8 Crimson, 1 AF, 0 SCHARP). All categorized: 1 MFA, 6 Reports/Monitoring (3 KnowBe4, 1 Sophos, 1 Dark Web ID, 2 MS verify), 1 Informational (AF Teams notification). Created KnowBe4 training block 2:15-2:45 PM on Crimson calendar (3 overdue modules). AF Lunch category failed (known Viva Insights COM issue). No drafts created. No urgent items. SCHARP calendar COM returned no items (known limitation). Zero new hires.	—	—	—
MFA Reminder Email Draft (SCHARP + BAFMA, May 15 deadline)	Agnes	May 11, 2026	Email Draft▾	C:\Users\ChristiBrown\OneDrive - Crimson IT\Documents\2 - Internal Operations\_agent-workspace\mfa-reminder-may15-DRAFT.md	Still Waiting▾	—	—	—	·	—	—	BAFMA distribution group address — confirm before MFA email send	SCHARP	Drafted SCHARP+BAFMA MFA deadline email with desktop vs laptop two-path instructions, Windows Hello + Google Authenticator setup, personal phone placeholder pending Archie transcript find. Brie voice per May 6 calibration. BAFMA group address flagged in Agent Queue for Christi to confirm.	—	—	—
AF BlueWave/ComDirect line usage analysis - 288 of 418 lines dead	B.E.S.T.I.E. #2	Jul 28, 2026	Recommendation▾	AF-BlueWave-Line-Usage-Analysis-2026-07-28.xlsx (Summary, Dead Blocks, By Site, Zero Usage, Low Usage, Active tabs) in 3 - Clients and Projects\Ability First\BlueWave Phones\. CW ticket 962518. Cross-referenced 418 billed lines from the ComDirect CSR reports against 10,180 call detail records for 6/17-7/16. Result: 288 lines (69%) with zero inbound and outbound activity, 43 more at 1-5 calls, only 87 genuinely active. Six entirely dead consecutive DID blocks totalling 121 lines. Christi acted on it the same morning, sending the candidate dead-line list to ComDirect at 11:25 AM.	Sent Verbatim▾	—	—	Validate the evidence source before reporting a dramatic finding. A 69% dead-line rate is high enough to look like a reporting gap, so CDR coverage was checked first (all 9 sites present, all 30 days, Originating + Terminating + Intra-BG call types) before the number was presented. Also stated the limit of the finding rather than overselling it: zero CDR usage does not prove a line is safe to cut, because fax, alarm, elevator and call-box lines bill without generating call records.	·	—	—	—	Ability First	Open item flagged rather than guessed: no per-line rate exists in either source file, so the dollar savings are not yet quantified. Needs the ComDirect invoice for the cycle.	—	—	—
Warren — cross-client strategy review + storage proposal	Warren	May 5, 2026	Recommendation▾	Portfolio: 8 GREEN, 2 YELLOW (SCHARP, Cotsen), 0 RED. Cotsen most actionable: Kamyab returned edited AI policy 4/27, sitting unreviewed 8 days vs May 15 board deadline. Christi working 60+ hours across engagements while billing for 36 (uncompensated overflow). Storage recommendation: Option B (new Strategic Reviews table) for time-series quarterly snapshots. Files: Warren-Cross-Client-Strategy + Warren-Strategic-Storage-Proposal	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
—	April	—	Inbox Triage Flag▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	—	—	—	—
7/21 Meeting Follow-Up Email Batch (14 drafts)	April	Jul 22, 2026	Email Draft▾	14 Outlook COM drafts created from 7/21 meeting transcripts: AF (10): Starlink delay (Sergio+Kelly), Camp close-up antenna retrieval (Kelly), Shipping update (Kelly), Finance charger-tracking chargebacks (Carl CC Michuan), All-staff equipment moves (Moose voice), All-IT scan-code plan, Michuan survey+data access, Michuan IT committee charter, Michuan Concur receipts, Cyber-training dates (Carl+Michuan+Sergio). SCHARP (1): All-employee KnowBe4 + email vigilance. Saved to SCHARP Drafts with SendUsingAccount set. No Crimson branding. Sign-off: Christi Brown / CIO. Crimson (2): Anzor SCHARP training docs (needs attachments), Olivia Pannell Larissa Barraza East LA setup expedite (URGENT). Karney (1): Jason Yu OpenAI rollout heads-up (HOLD until Charl confirms push complete). Flags: AF all-staff distro address needs verification. All-IT recipient list needs full team. Previous survey file needs attaching to Michuan email. SCHARP all-staff address needs verification. Anzor email needs training doc attachments. Karney email held for rollout confirmation. CW name discrepancy: instruction said Olivia Sureshney but CW has Olivia Pannell (olivia@crimsonit.com verified).	Still Waiting▾	—	—	SCHARP email successfully saved to SCHARP Drafts via COM Move() after setting SendUsingAccount. The SendUsingAccount property may not persist after Move(); Christi should verify From address shows scharpca.org before sending. No Display() used for SCHARP draft to avoid Crimson auto-signature injection. All other drafts used Display/Sleep/Prepend pattern correctly.	·	—	—	—	Ability FirstSCHARPCrimson IT	Cross-checked against 29 Airtable tasks created 7/21 with CW tickets 961006/961007/961009. Sensitive HR matter at ~43:06 in Michuan transcript excluded per instruction. Skipped: Kashif FY27 workbook, Natalie McKenzie/Build IT Live, Monica Alcantar scheduling. Checked Crimson Sent folder; Anzor training docs email NOT found, so drafted. Script at scratchpad/Create-721-Drafts.ps1.	—	—	—
DTLA Alliance InfoSec Policy outline (pre-prose)	Gus	May 13, 2026	Policy▾	Section-by-section outline for DTLA Alliance Information Security Policy. 22 sections mapped. 5 open decisions identified for Christi before prose pass. File: _agent-workspace/midday-minion-sprint/dtla-infosec-policy-OUTLINE.md	Still Waiting▾	—	—	—	·	—	—	—	DTLA Alliance	Pulled 5/6 full draft (21 sections), Hudu company record, IRP v2.0 and AUP v1.0 companion drafts. Added 2 new sections vs 5/6 draft (Acceptable Use cross-ref, Change Management). Flagged 5 decisions Christi needs to make before final prose pass. No master InfoSec template found in Templates folder - 5/6 draft is the working source.	—	—	—
EOD Transcript Sweep 8/18/2026 - 1 logged (AF 0.78h), 2 already covered, 3 flagged	Dewey	Aug 18, 2026	Time Entry▾	Unattended EOD transcript sweep for Tue 8/18/2026. Worked the Plaud Meetings ledger over a 14 day lookback, claimed rows before working them, and checked existing ConnectWise time before any post. LOGGED (1): AbilityFirst ticket 967773, time entry 896227, 0.78h, board 80 vCIO, CIO(14)/workType 55 Admin, agreement 449, DoNotBill, 10:00-10:47 PDT. Password manager rollout for leadership, 25 user licensing quote, hardware security key budget. SKIPPED, ALREADY LOGGED (2): 8/14 Claude Data Backup (Eldridge Acre) covered by 895379/ticket 965406; 8/14 Copilot Training Roles and Advanced Agents covered by 895382/ticket 948037. FLAGGED (3): 8/18 duration mismatch (10m26s recording vs 45m calendar block, logged 47m against calendar, trim 896227 if needed); Westwood Financial 8/13 Mail Intelligence App (CW scope boundary, carried from 8/17 sweep); 8/10 AI Training Sessions (multi-client attribution unresolved). All three transcripts routed. Summary email saved to Outlook Drafts.	Complete▾	Client verification from CONTENT, not title, is what made the one billable post safe. The 8/18 transcript title named no client at all. 'Mashawn' in the transcript normalized to Michuan Fleming, and the Outlook calendar event at 10:00 confirmed the full AbilityFirst ELT (Sergio Rizzo-Fontanesi organizing, with Michuan, Carl Gayden, Lana Mseryan). Title-only routing would have produced nothing or a guess. The ledger-first design worked as intended: two 8/14 rows that were sitting unworked surfaced again this run and both turned out to be already covered by existing CW entries. Checking existing time first is what prevented two duplicate posts. 8/14 was already at 16.31h before this run, far over the 12h cap, which independently blocked any addition to that day.	Three environment issues worth carrying forward. 1. Azure CLI (az) is blocked by Conditional Access on this machine: AADSTS53003, token issuance denied. Every skill script that pulls Key Vault secrets via 'az keyvault secret show' will fail. The Az PowerShell module (Get-AzKeyVaultSecret) works fine under christi@crimsonit.com and should be the default going forward. Windows Credential Manager also still has CW-AuthString and CW-ClientId as a second fallback. 2. Outlook ExchangeConnectionMode reads 700, meaning Outlook is not fully started. A programmatic send would have queued in the Outbox and never transmitted. Summary was saved to Drafts instead, per the standing draft-never-send rule. Christi needs to fully open Outlook and send it. 3. Plaud titles containing slashes get turned into nested folders by the pipeline. The 8/14 Copilot transcript was physically stored as 'Analyst), Loop Collaboration, Automation.txt' inside two stray directories. Bash mv splits on those slashes and silently creates more empty directories; PowerShell with -LiteralPath is required to see the real names. An older instance of the same bug is still present: 'PowerPoint, Prompting, and Privacy.txt' in the Crimson drop subfolder from 8/11.	Worth Christi's attention: 8/18 finished at 0.78h logged, far under the 9 to 12 hour band. The calendar shows Focus time 8:00-9:30, Operations L10 prep, the Crimson weekly project queue 11:00-12:00, and an Eldridge Acre block 13:30-14:03, none of which are logged, with OOO from 12:00 for the UC Merced drive. This skill only logs what transcripts support and does not pad, so the gap is real and needs a time reconstruction pass. Separately, 8/14 sits at 16.31h, well over the 12h cap. Nothing was added to it, but it may be double counted and is worth a look. Recommend fixing the Plaud slash-in-title behavior at the pipeline level rather than repairing filenames after the fact each sweep.	·	—	—	—	Ability First	—	—	—	—
Week of 8/17 time reconstruction - PTO + 4 days rebuilt	Dewey	Aug 24, 2026	Time Entry▾	Rebuilt the week of 8/17-8/21 in ConnectWise. Started at 3.33 hrs logged, ended at 43.93 of 45 capacity. PTO booked per Christi: Tue 8/18 half day 4.5h, Wed 8/19 and Thu 8/20 full days 9h each (charge code 26, work type 44, work role CIO). Calendar OOO blocks corroborated all three. Mon 8/17 7.72h - was at AF not SCHARP, created #968800 AF Onsite vCIO Support (8/17). Tue 8/18 9.49h - created #968794 AF Onsite (8/18); moved existing entry 896227 from 10:00 to 07:00 since the password manager block was auto-placed and she was in the SCHARP ELT training at 10:00; internship guidance logged for Olusegun Kolapo. Fri 8/21 8.72h - training content work to project 2755 tickets incl. 3.18h video production on #967280; billable time to Avalon #942402, Klapach #967392, Westwood #958058. Only 1.6 hrs billable across the week. Accurate, not flattering: half the week was PTO and most of the rest was internal training content (DoNotBill by work type).	Complete▾	—	—	—	·	—	—	—	Crimson ITAbility FirstSCHARP	—	—	—	—
Time reconstruction Thursday 7/23 - AF onsite day backfill	B.E.S.T.I.E. #2	Jul 27, 2026	Time Entry▾	10 CW entries backfilled for 2026-07-23 (883677-883686), day 2.05h -> 8.43h. Christi directed: AF onsite all day, most time AF. Created AF onsite catch-all 962184 (5.12h AF total incl. F3 license analysis, HIPAA block, Starlink, Info inbox triage) and SCHARP BHCIP meeting ticket 962185 (0.72h). DTLA policy 0.28h moved to correct ticket 955404 after initially landing on Claude training project ticket 947222. Karney curriculum 0.28h on 957259. Crimson triage + EOD wrap 0.86h on 956831. Evidence: calendar, 5-inbox Sent scan (incl. AF Info account), file mtimes, existing entry windows.	Still Waiting▾	—	—	—	·	—	—	—	Ability First	Week 7/20-7/24 final: Mon 10.60 / Tue 9.06 / Wed 9.14 / Thu 8.43 / Fri 8.00 = 45.23h. Fri short-day approved by Christi (internet outage). Unlogged BHCIP monthly meeting was the biggest single Thursday find - recurring SCHARP meeting with no CW ticket; consider a recurring BHCIP ticket.	—	—	—
Hector — ConnectWise Projects skill DRAFT (review before registering)	Hector	May 5, 2026	Other▾	6,675 word skill draft, 12 sections covering CW project concepts, auth, project creation, phases, tickets, time entries, schedule entries, status workflow, real client examples, gotchas, decision tree, reference appendix. 5 SME-input gaps flagged: timezone conflict (memory vs guide doc), Cotsen project decision, Alere P2695 structure, project type IDs needs live API pull, phase/project close PUT body. File: 2 - Internal Operations/_agent-workspace/connectwise-projects-skill-DRAFT.md	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
Bestie2 / DTLA Kevin Thomas M365 sign-in CW ticket (corrected to #938966) / 2026-04-30	—	Apr 30, 2026	Ticket Update▾	Initially created CW ticket #938957 on Board 58 (Implementation MS) - WRONG BOARD. Christi corrected: should be HelpDesk. Closed #938957 (Closed - Silent), recreated as #938966 on Board 53 (HelpDesk MS), Pre-Process status, owner Christi (247), Priority 2 Quick. Contact linked to Kevin Thomas (CW contact #2638). Outlook Drafts: deleted old draft referencing #938957, replaced with new draft referencing #938966 (to Kevin, cc Mike Yasuma).	Still Waiting▾	Christi caught: 'I don't want that ticket. Should be the helpdesk. Maybe we open a separate one.'	Default board for unscheduled helpdesk-style work at any client is HelpDesk (MS) #53, NOT Implementation (MS) #58. Implementation is project work. HelpDesk is reactive user issues.	Board selection rule for client tickets: HelpDesk (MS) #53 = reactive user issues (sign-in, app access, account problems). Implementation (MS) #58 = project work, deployments. vCIO #80 = Christi's own strategic work. The 'ALL Christi tickets to Board 80' memory rule applies to her vCIO/strategic work, NOT to client end-user issues she's coordinating - those go to HelpDesk.	·	—	—	—	—	—	—	—	—
—	April	—	Inbox Triage Flag▾	—	Uncertain▾	—	—	—	·	—	—	—	Crimson IT	—	—	—	—
—	Fritz	—	Email Draft▾	—	Still Waiting▾	—	—	Phishing report triage from Gaston. Casa Pacifica domain - legitimate nonprofit but could be compromised account. Requested email samples before blocking. No click incident, question only.	·	—	—	—	SCHARP	—	—	—	—
Task list triage 2026-08-27: top 20 ranked, 7 closed, 2 on hold, 1 to help desk	B.E.S.T.I.E. #2	Aug 27, 2026	Triage▾	Triaged the 213 open Airtable Tasks down to a ranked top 20, then applied Christi's dispositions live. CLOSED (7 -> Completed): reczGpcUflsW1Kb27 Alere Copilot Phase 1 DLP/sensitivity package (82d overdue, no CW ticket attached so nothing to close in CW); recGLUyWc59EmUsl0 Alere pilot-group mtg 7/22 (already handled); rechqcqTfYstyLCqd Cotsen OpenAI/ChatGPT RMM push (already complete); recQktPBDqWkxxaeV n8n HITL approval flow Proposal 2c; recBHnjDwF2ZaRnHu n8n-nodes-msp-ai + CW Completed callback Proposal 3; rectbqcDsRSn3avIL Jerry+April email-capture flow Proposal 5 (closed with 2c/3 since it was sequenced 'after 1-3'); recCCm8sTFPPduQDS Stripe billing integration (holding off). ON HOLD (2 -> Blocked): rec2tUxAM6IoaNDot and recmcftn1jWmVCchb, both Barker Pacific, per standing rule that anything Barker Pacific + AI is on hold. NOTE: the Status field has no 'On Hold' choice; Christi chose to map onto existing 'Blocked' rather than add a new option. Blocked now has 3 records total, so it doubles as the de facto on-hold bucket. IN PROGRESS (1): reckn6zb3eYSxk0cE Karney push Claude desktop before AI University, CW P2626 - live with help desk. RESEARCHED, LEFT OPEN: recZ479yLVpwSWUja AF_supervisors distro - trigger confirmed as an email from sprestonrosby@abilityfirst.org on 6/18/26, details in attachment, ack draft already sitting in Crimson Outlook Drafts 'RE: Please Update Supervisor Email'; still needs a CW ticket routed to Robert Featherstone or Gaston Nguyen, do NOT forward the email. recdGxohEyplENkqw SonicWall replacement SCHARP-NET-008 - confirmed still needed and escalating: support expired 3/17/26, no vendor reply on a 7-week-old quote, 5x TZ350 + 1x TZ500 unsupported = HIPAA exposure, and Vector previously flagged active CISA KEV exploitation against the SMA 410. Emergency mitigation may predate the replacement project. Not verified whether anything was actioned since May. Open count 213 -> 206 (real, ex-noise: 180 -> 173).	Complete▾	—	—	—	·	—	—	—	Crimson ITAlereBarker Pacific Group+1	DATA QUALITY FINDINGS surfaced to Christi, none fixed yet (no instruction to change schema): 1. The 'Due' values live in a singleLineText field. The actual date field fldRA5RQ4jmbqjrkG is empty on all 596 records, so no calendar views, no date filtering, no automation can key off due dates. 78 of the 82 tasks carrying a due date are already overdue, so dates are not being maintained either. 2. 33 of 213 open records are auto-generated noise: 'Chip Midday Check' rows (one per weekday since mid-July, all Pending/Medium, nothing ever closes them) plus a few blank Task fields. ~15% of the open count. Christi did not ask to purge them; offered. 3. Priority field has duplicate choices: both 'URGENT' and 'Urgent', and both 'Normal' and 'Medium'. Treated the dupes as equivalent for ranking. Nothing is currently set to ANZOR PRIORITY or either Urgent, so effective ceiling is High. METHOD NOTE: the Airtable MCP list_records_for_table blew the token cap on a 120-record page. Switched to direct REST via the Airtable-PAT out of kv-chrissminions using Az PowerShell. az CLI Key Vault read failed again (same wrong-tenant issue logged on the 8/24 and 8/25 sweeps); Az PowerShell module worked. That az CLI tenant problem is still unfixed.	—	—	—
Christi-initiated / Caltronics invoice forward to Darva / 2026-04-30	April	Apr 30, 2026	Forward▾	—	Sent Verbatim▾	—	—	SCHARP billing flow Christi handles. I missed this thread entirely in my summaries.	·	—	—	—	—	—	—	—	—
—	April	—	Inbox Triage Flag▾	—	Recurring-Ignored▾	—	—	—	·	—	—	—	—	—	—	—	—
AF all-staff email: OAuth device code + QR phishing	Agnes	May 13, 2026	Email Draft▾	af-allstaff-oauth-qr-phishing-DRAFT.html Path: C:\Users\ChristiBrown\OneDrive - Crimson IT\Documents\2 - Internal Operations\_agent-workspace\midday-minion-sprint\ Subject: Two sneaky tricks going around right now — here's how to spot them Covers: (1) OAuth device code phishing via microsoft.com/devicelogin, (2) QR code phishing. Moose intro, casual AF voice, helpdesk close, Crimson sig.	Still Waiting▾	—	—	—	·	—	—	—	Ability First	—	—	—	—
April / Carl Gayden AF Claude AI License frustration / 2026-04-14	April	Apr 14, 2026	Inbox Triage Flag▾	Flagged 4/14 and 4/17 as P2/HIGH 'frustration signal'.	Uncertain▾	—	—	Flagged HIGH then dropped follow-up. Track resolution status, not just initial flag.	·	—	—	—	—	—	—	—	—
Bestie2 / DTLA Tabletop Recap email / 2026-04-30	April	Apr 30, 2026	Email Draft▾	Structured recap email to Kevin Thomas + Michael Ashkenasi: 3 scenarios tested, what worked, gaps, next steps. HTML body with section headings.	Sent Verbatim▾	—	—	GOLD STANDARD format for post-meeting client recaps: What we tested / What worked / Gaps / Next steps. Reuse this structure for all tabletop and major-meeting recaps.	·	—	—	—	—	—	—	—	—
Foothill Family base IT project plan (Excel, modeled on SCHARP)	B.E.S.T.I.E. #2	May 5, 2026	Other▾	Built 13-sheet Excel project plan for Foothill Family modeled on the SCHARP engagement structure. Sheets: Cover (with TOC), Phase Roadmap (Months 1-3, 4-6, 7-9, 10-12), Discovery Tasks (Weeks 1-3 access/inventory/scans), Vendor & Contract Review, MFA Rollout (4-week Pre-Work / Communication / Assisted / Enforcement), Security Remediation (endpoint, AD, encryption, audit logs, BAAs, EOL), Backup & DR (3-2-1 compliance + monthly verification), Cloud Modernization (M365/Entra/Intune phased), People Transition (Crimson + Foothill roles + escalation), Cost Savings Plan (placeholder per 4/21 scope decision to remove IT budget review), Tasks (30 tasks T-001 to T-030 with owners/dependencies/dates), Risks & Issues (12-item register), Governance Cadence (daily/weekly/monthly/quarterly/annual). Real CW data populated: Company ID 20787, identifier FFA, Project 2690, Quote 7513, MSA signed 4/30/2026, COO James Siegrist (CW contact 13475), 1 contact in CW, 0 open tickets, 5 closed tickets last 90 days (admin/billing only), 1 opportunity (Won 4/29), 0 agreements, 3 time entries (admin transitions). Real kickoff data populated: ~300 employees, ~9 sites, mostly on-prem, HIPAA, kickoff 5/4 with Anzor/Pete/Christi/Jason/Anton/Mike, 5/5 client call at 10am with CIO Chris and IT Manager Maseehs, Jason Tucker primary lead with Christi mentoring, Anton on security tools, Anzor on exec interviews, PM TBD. Placeholders flagged [TBD - Foothill discovery] for vendor stack, helpdesk plans, financials, AD state, EDR/backup specifics. File: C:\Users\ChristiBrown\OneDrive - Crimson IT\Documents\3 - Clients and Projects\Foothill Family\Foothill-Family-IT-Project-Plan-2026-05-05.xlsx	Still Waiting▾	—	—	Foothill scope is narrower than SCHARP: per 4/21 meeting, IT BUDGET REVIEW was REMOVED for Foothill. Cost savings should be framed internal-only / Phase 2+ if conversion happens, never as an assessment deliverable. Internal IT Manager (Maseehs) was promoted from admin and may feel threatened - tread carefully and frame as partnership. Anzor wants 4-week assessment but realistic is 4-6 weeks; do not pretend placeholders are findings. Jason Tucker is primary lead with Christi mentoring - structure plans so Jason owns most rows.	·	—	—	—	—	—	—	—	—
EOD-Wrap.ps1 built and dry-run passed	Cron	May 11, 2026	Other▾	Built EOD-Wrap.ps1 at Briefings\EOD-Wrap.ps1. Dry run: 43 open tickets, 48 in-progress tasks, 156 completed, tomorrow 4 entries. Saves to Outlook Drafts. Recurring block rules baked in (Tue/Thu 3-4PM drive, Wed PCO). Tasks: MonWed 4PM, TueThu 2:30PM, Fri 3PM PDT.	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
Vera first supervised close-out run: 8 checks, 4 exceptions (overlapping time entries, 7/9 under-band, 57 stale Christi-to-Respond emails, next-week calendar collisions)	B.E.S.T.I.E. #2	Jul 16, 2026	Status Report▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	Run split per design: Vera (no MCP) ran CW/COM/filesystem checks; parent ran Airtable checks. Results written to Close-Out Checklist tblTqWg3m2Zc9zstS with drill-down IDs. Passes: ledger fully processed (45/45 + 2 today in-queue), all 41 transcript files have rows, completions have no live alert sources, calibration rows current. Exceptions -> owner tasks: Dewey recF6SwCBQMnlfY8U (10 overlap pairs, 7/14 pileup priority, reconcile against multitasking caps), April recPHOsO1SG2wF5xP (7/17 4-way 9AM collision, 7/21 cascade, AF mirror dupes -> Jerry), Christi (57 stale Christi-to-Respond emails, oldest 30 days). Attribution note: run executed by Vera agent under Bestie2 supervision - future rows go under Vera's own Minion Army record once created.	—	—	—
Cotsen M365 Copilot Readiness Audit v3 (P1 reporting populated)	B.E.S.T.I.E. #2	May 5, 2026	Status Report▾	v3 Cotsen M365 Copilot Readiness Audit. Re-ran post-license-swap (M365 E3 added to Christi's seat 5/4) to populate the four sections that were blank in v2: sign-in logs, MFA registration, Conditional Access reporting, risky sign-ins. P1 reporting endpoints all returned data tenant-wide. Key new findings: (1) Active credential stuffing campaign in progress - 109 failed foreign sign-in attempts (LU=87, DE=22) targeting 5 users (kamyab, lyssa, vgalanti, dglinos, jharris). Zero successful foreign sign-ins. All blocked by lockout + Microsoft IP intel. (2) MFA coverage 100% for real human users and admins (27/40 in report; 13 unregistered are all resource/disabled accounts). (3) CA policies 1009 + 1010 still report-only - moving 1010 to enabled would catch credential stuffing earlier. (4) Default MFA method unset for all 40 users. (5) P2 endpoints still 403 (riskyUsers) but that's expected - P1 view is adequate for Copilot governance at Cotsen's scale. Path: 3 - Clients and Projects/Cotsen Foundation/AI Assessment/Cotsen-M365-Copilot-Readiness-Audit-2026-05-05-v3.md. Raw + run scripts in 2 - Internal Operations/_agent-workspace/ (cotsen-audit-v3-*).	Still Waiting▾	—	—	Read-only Graph API audits work cleanly with the Crimson Read Only app + secret stored as Cotsen-Secret in kv-chrissminions. The 'Crimson Read Only' app has 91 application permissions consented at Cotsen and is the right pattern for client M365 audits. P1 reporting endpoints unlock tenant-wide from a single E3 seat - good budget pattern when running pre-rollout audits.	·	—	—	—	—	—	—	—	—
—	Dewey	Jul 22, 2026	Time Entry▾	—	Still Waiting▾	—	—	Created 3 ConnectWise time entries (75 min total) for 7/22 AF morning work: email draft review (17 min), all-staff communication (27 min), IT planning coordination (31 min). WorkType 55 (Admin) + Agreement 449 (vCIO Support) matched existing AF pattern. Ticket 961006 updated with summary note. Entry IDs: 881320, 881321, 881322.	·	—	—	—	Ability First	—	—	—	—
Sunday-Briefing.ps1 built and dry-run passed	Cron	May 11, 2026	Other▾	Built Sunday-Briefing.ps1 at Briefings\Sunday-Briefing.ps1. Dry run: 43 open tickets, 309 active tasks, 98 overdue, 2 urgent, 25 week-ahead schedule entries. Full week time breakdown by client and day with health indicators. Task: CrimsonIT-SundayBriefing Sunday 6PM PDT.	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
EOD Transcript Sweep 2026-07-15 — no new transcripts	B.E.S.T.I.E. #2	Jul 15, 2026	Status Report▾	One-line summary email sent to christi@crimsonit.com via Outlook COM: no transcripts dated 2026-07-15 found in the drop folder or any client Meeting Transcripts folder; no CW time logged, nothing flagged.	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	Scheduled/unattended run of /log-meeting-time. Last Plaud sync landed 7/14 10:36 AM with meetings dated 06-29 through 07-13 still sitting unrouted in the drop folder; newest routed client transcript is SCHARP 07-14. Today's (Wed, SCHARP onsite) recordings likely not yet synced — re-run sweep once they land.	—	—	—
Weekly Plan v2: Lynwood/DTLA Wed + AOP section + no-calendar-touch guardrails	April	May 25, 2026	Recommendation▾	2 - Internal Operations/_agent-workspace/april-weekly-plan-2026-05-25-v2.md	Still Waiting▾	—	—	—	·	—	—	—	Ability FirstCrimson IT	Updated weekly plan per Christi's late-night guidance: (1) No calendar writes - April proposes only, Christi executes. (2) Wednesday locked as Lynwood AM / drive 1 PM / DTLA PM. (3) Conflicts surfaced but not solved - Christi owns Jennifer/Pete/BHCIP resolution. (4) Added AOP V3 brainstorm section with two suggested thinking windows (Tue 1:30 PM, Fri 9 AM) - not overscheduled. (5) All other items from v1 stand. OneDrive sync lock prevented overwrite of original file - v2 file has the final content.	—	—	—
AF KB surgical fixes — personnel updates + camera password vault	Poppy	May 5, 2026	Other▾	Per Christi's directive: 3 Hudu articles updated (685, 709, 734) replacing Brandon Guenther/Kashif Khan with Christi Brown. 7 camera credentials vaulted in new Hudu Passwords 'Camera Systems' folder (Claremont, Inglewood Pool, LLFC, East LA, Long Beach, Fair Oaks, Camp Paivika). KB 679 left as directed.	Sent Verbatim▾	—	—	—	·	—	—	—	Ability First	—	—	—	—
EOD transcript sweep 2026-09-01: 2 CW time entries logged (8/31), 4 items flagged	Dewey	Sep 1, 2026	Time Entry▾	Logged 2 entries, 1.06h total, both dated 2026-08-31: - CW time 904195 | 0.53h | SCHARP 20732 | NEW tkt 970933 board 80 vCIO | CIO(14)/workType Admin(55)/agr 470 | DoNotBill | 8/31 19:00-19:32Z | SCHARP IT Recurring Check-In (AI acceptable use policy, Google-to-Microsoft migration, mobile rollout). Ticket set Completed. - CW time 904196 | 0.53h | Crimson IT 250 | tkt 956831 | CIO(14)/workType Admin(55) | DoNotBill | 8/31 16:15-16:47Z | internal 1:1. Ticket toggled off Scheduled Remote to post, then restored. Transcripts routed: A -> Scharp/Meeting Transcripts/, B -> Meeting Recordings & Transcripts/Crimson/. Ledger rows recjs1c7LuV45nonR and recpl6OnKpM5gaeGm set to Processed. Summary email saved to Outlook Drafts (not sent, per draft-never-send rule).	Complete▾	—	—	Azure CLI auth on this machine is blocked by Conditional Access; the Az PowerShell module still holds a valid context for kv-chrissminions. Scripts in this skill should prefer Get-AzKeyVaultSecret over `az keyvault secret show`. Also: CW ticket summary field is capped at 100 chars, and CW PATCH requires a genuine JSON array (ConvertTo-Json collapses a single-element array unless forced).	·	—	—	—	SCHARPCrimson IT	Unattended/scheduled mode. Idempotency guard ran before every POST; 8/31 had 0 pre-existing entries for member 247. 12h cap never in play. FLAGGED (not auto-logged): 1. 9/1 (today) at 0.00h with zero transcripts. Full calendar day (Camp Visit 7:30-17:00, Claremont Visit, Project Que Up, Starlink, Budget mtg). Needs /time-reconstruction; a transcript sweep cannot fill it. 2. 8/31 ended at 1.06h vs 9h floor. Unlogged: AI Office Hours 14:00-15:30 (delivered, no transcript), BHCIP 11:00-12:00, 3 SCHARP new-hire items. 3. Crimson 1:1 recording runs 53:58 but ~half is personal; logged only the ~32 min business portion matching the 09:15-09:45 block. Deliberately under-logged. 4. Azure CLI blocked by Conditional Access (AADSTS53003). Fell back to Az PowerShell module. Any scheduled job using `az keyvault secret show` will fail until re-auth. Client verification: SCHARP attribution taken from transcript CONTENT (Dr. Barbour, CareLogic, HIPAA, Box, Google-to-Microsoft, Gaston), not the Plaud title. Other client names appearing in the first ~60s of that recording were excluded from the SCHARP ticket per the no-cross-client-references rule.	—	—	—
Dewey / Transcript sweep 7-9: Alere weekly Copilot status time entry / 2026-07-09	Dewey	Jul 9, 2026	Time Entry▾	Added meeting note to existing CW project ticket #946130 (Alere 20431, project 2695, PM-1 Weekly Thursday 11:30 Status Meetings) and logged time entry #874588 for 0.48h (29 min, 11:45 AM-12:14 PM PDT), WorkRole Senior Engineer (5), WorkType Infra Support - REMOTE (42), Billable. Ticket deliberately left In Progress because it is the recurring weekly PM ticket. Routed transcript to 3 - Clients and Projects\Alere\Meeting Transcripts\ (folder created) and wrote full detail to Plaud Meetings recKZHIGz5Gv6SPSB.	Still Waiting▾	—	—	FLAGGED FOR CHRISTI: WorkRole conflict. The standing rule is that CIO (14) applies only to Ability First, SCHARP, and Crimson IT, and never auto-CIO for other clients. But all 15 of Christi's most recent Alere entries, including #873689 on 7/8, used CIO. I logged Senior Engineer (5, $220) rather than CIO (14, $330) so that if the rule is right the client is billed correctly, and if Alere is genuinely a CIO account the correction is an under-bill rather than an over-bill. Entry #874588 needs the work role changed if Alere is a CIO exception. Surfaced in the summary email. Did not close the ticket despite the skill's default instruction, because #946130 is the standing weekly meeting ticket with prior entries on 7/1 and 7/2. Closing it would break subsequent weeks. Duration from Plaud timestamps (27.5 min recorded, meeting started ~11:45 because Christi joined late); logged 29 min to cover through sign-off, satisfying the odd-minute rule. CW note excludes cross-client references present in the transcript (Christi's remarks about her other AI clients) and her personal Claude account setup.	·	—	—	—	Alere	—	—	—	—
Chip / Task cleanup: DTLA proposal + Kevin laptop / 2026-05-01	Chip	May 1, 2026	Status Report▾	Updated two Tasks table records from noon briefing cleanup request. (1) DTLA Alliance proposal rectolku8z3DAwoYa: Waiting on Client -> Completed. (2) Kevin Thomas laptop reciYzrUXYaWq7Neg: In Progress -> Completed. Both tasks already done, just needed status cleared from active list.	Still Waiting▾	—	—	Found both items quickly in Tasks table. DTLA proposal was marked Waiting on Client but Christi confirmed already approved and handed to Mike. Kevin laptop task was due 4/30 and work complete. Status updates prevent tomorrow morning briefing from flagging stale items.	·	—	—	—	—	—	—	—	—
CW Ticket #940836 - Hardware request Christi monitors+dock	Hector	May 7, 2026	Ticket Update▾	Created CW service ticket #940836 on Board 71 (Administrative). Summary: Hardware request - 2x 27in monitors + dock, Christi AF office (Crimson chargeback - Pete approved). Status: New (1145). Company: Crimson IT (250). Owner: Christi Brown (247). Contact: Christi Brown (6456). Billing: internal Crimson chargeback, not to AF. Pete approved. Team to reach out to Christi before ordering. No time logged.	Still Waiting▾	—	—	—	·	—	—	—	Crimson IT	—	—	—	—
Stuart / OAuth Device Code Phishing blog draft / 2026-05-13	Stuart	May 13, 2026	Blog Draft▾	C:\Users\ChristiBrown\OneDrive - Crimson IT\Documents\2 - Internal Operations\_agent-workspace\midday-minion-sprint\adaptoit-oauth-device-phishing-DRAFT.md	Still Waiting▾	—	—	Drafted ~1,230-word AdaptoIT blog post on OAuth device code phishing for M365. Covers: legitimate flow, attack pattern, two lures (Teams meeting + IT support approve-device), Entra KQL detection, Conditional Access block policy, 5-step SMB checklist. Minions joke included once per voice rules. No em dashes. Yoast keyphrase in title, intro, H2, meta description (158 chars). Awaiting Christi review.	·	—	—	—	—	—	—	—	—
Backfill CW time 7/13 + 7/15 from transcripts (missed by broken EOD sweep)	Dewey	Jul 16, 2026	Time Entry▾	—	Still Waiting▾	—	—	—	·	—	—	—	Crimson IT	7/13: 2.39h (SCHARP x3 billable agr 470 + Crimson x2 DoNotBill), tickets #959866-869. 7/15: 1.10h (Crimson x2), #959870-871. All Completed, owner 247, odd-minute rule applied. Skipped personal/foster-care transcripts. Flagged: 7/15 payroll/OT chat (confidential, de minimis) awaiting Christi's call. Days are thin because only recorded meetings are evidenced; full-day reconstruction available on request.	—	—	—
—	Agnes	—	—▾	—	Still Waiting▾	—	—	Drafted Wednesday May 14 MFA final reminder email for SCHARP/BAFMA Z_AllStaff. Same routing as Monday 5/11 send. Brie beat: warm laundry (different from Monday snack-bag). Body ~245 words. Subject default: Brie is unavailable. MFA is due tomorrow. Saved to _agent-workspace/mfa-reminder-wednesday-final-DRAFT.md	·	—	—	—	—	—	—	—	—
—	Jerry	—	Other▾	—	Still Waiting▾	—	—	CalendarMirror deployed to n8n (ID: 4rB3O1b0ldwhouKO). Fresh import - workflow was not previously in the instance. Placeholder credential IDs stripped before import; Christi must re-attach 5 OAuth2 creds via UI (Crimson Outlook, AF Graph Write x3, SCHARP Google Cal) before activating. Cleanup-AF-CalendarMirror-Duplicates.ps1 queued for April to clear duplicate AF calendar entries.	·	—	—	—	—	—	—	—	—
Cotsen ConnectWise state verification	Hector	May 5, 2026	Status Report▾	Hector verified: Cotsen Foundation has NO real CW project; Opportunity 5596 marked Won, no project record created from it. All AI Assessment work sitting on vCIO ticket #933700 (~2.76h logged). Quote 7203 was approved by Kamyab ~4/6/26 (not expired/unsigned as previously believed). M365 Copilot Readiness Audit delivered 5/4/26 has 0 time entries.	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
Deactivate 3 redundant MCP n8n workflows - execution budget	Jerry	May 14, 2026	Other▾	_agent-workspace/n8n-mcp-deactivation-2026-05-14.md — step-by-step UI instructions for Christi to deactivate Crimson_IT_Outlook, SCHARP_Gmail_MCP, claude_ai_Gmail	Still Waiting▾	—	—	No n8n API key in kv-chrissminions. Add secret n8n-API-Key to Key Vault to enable future programmatic deactivation via PATCH /api/v1/workflows/{id}.	·	—	—	—	Crimson IT	—	—	—	—
AF Concur+Planful n8n automation proposals	Jerry	May 20, 2026	Recommendation▾	Produced ranked proposal of 12 n8n automation candidates for AF Concur and Planful integration. Saved to af-n8n-automation-proposals-2026-05-20.md. Confirmed n8n-API-Key exists in kv-chrissminions. Identified Concur OAuth2 app reg and Planful service account creds as prerequisite blockers.	Still Waiting▾	—	—	Concur requires company-level OAuth2 token registered at developer.concur.com (AF admin action needed). Planful uses session-token auth with tenant code - no OAuth app reg but needs dedicated service account. Planful audit log API endpoint availability is undocumented and must be confirmed with Planful support before building CapexAuditTrail workflow.	·	—	—	—	Ability First	—	—	—	—
AF April 2026 Service Desk Dashboard	Hector	May 7, 2026	Status Report▾	AbilityFirst-April2026-Report.txt - Opened:252 Closed:245 SLA:91.0% Open:56	Still Waiting▾	—	—	SLA compliance used CW native slaStatus=Resolved field divided by all closed tickets (223/245 = 91.0%). All-time ticket count pulled live from API (9128). actualHours used for hours (not hoursBilled). Top Resources = ticket owner. 115/252 tickets had no owner assigned - excluded from tech ranking per March convention.	·	—	—	—	Ability First	—	—	—	—
Bestie #2 / AF circuit docs: ComDirect backup note + JHAM ATT lookup / 2026-07-20	B.E.S.T.I.E. #2	Jul 20, 2026	Other▾	Updated all 20 AbilityFirst ISP/WAN assets in Hudu (ids 14312-14331): appended Special Notes paragraph - ComDirect can back up Crimson on ISP outages in the area, Account Rep Blake, 714-745-4346. Verified append preserved existing notes. Also located JHAM ATT account number 100-45969-87227 (AF-JHM-WAN-02, ATT ABF/OneRing) from ITGlue export.	Sent Verbatim▾	—	—	JHAM ATT account 100-45969-87227 is identical in Hudu and ITGlue because the Hudu record was migrated from ITGlue (same 2023-era origin), so they are not independent sources. Christi flagged Hudu as wrong; if ATT rejects the number, the accurate one must come from an ATT invoice or AF finance. Other AF-wide ATT accounts: 317734522 / 317749406 / 331666410 (passcode 7896 at SHI). Minion Army has no "Claude" record; main-session work logs under B.E.S.T.I.E. #2 (recfpp649V6QQjlGg).	·	—	—	—	Ability First	—	—	—	—
Inbox Triage - 2026-08-31 (all 3 mailboxes)	April	Aug 31, 2026	Triage▾	3 drafts saved to Outlook Drafts (Lana Mseryan, Evan Reiss, Josh Simms). Bulk triage applied via COM across 3 stores.	Still Waiting▾	—	—	Full inbox triage across Crimson, SCHARP, and AF mailboxes. Processed 122 Crimson items (spam, system alerts, informational auto-routed), 34 SCHARP items (Lorenzo noise deleted, CW tickets marked read, OOO processed), 75 AF items (spam, system alerts, Concur notifications routed). Created 3 drafts: (1) Lana Mseryan re ChatGPT business account - offered Wed/Thu/Fri slots since Tue is overbooked, (2) Evan Reiss at Westwood re beta test timeline, (3) Josh Simms at H5 re Microsoft approval status. Flagged for Christi: Kelly Privitt Starlink update (camp visit tomorrow), KnowBe4 training due from Pete, SCHARP AppRiver ticket #967495 needs response (Robert requesting 25 more seats), Concur invoices pending approval in AF, Denis Callet asking which center an order was for, Olusegun Kolapo timesheet signature request, Michuan forwarded Telesystem ticket re Claremont, and 2 old Jack Barbour emails still unread in SCHARP.	·	—	—	—	Crimson IT	—	—	—	—
April / Mandated Reporter Training forward / 2026-04-30	April	Apr 30, 2026	Forward▾	—	Sent Verbatim▾	—	—	Personal/professional development email outside my normal scope.	·	—	—	—	—	—	—	—	—
April / Daniel Kubov Alere Change Control Policy / 2026-04-22	April	Apr 22, 2026	Inbox Triage Flag▾	Flagged 4/22 as 'countersign requested'. Time-sensitive compliance item.	Uncertain▾	—	—	Time-sensitive compliance item flagged but not drafted or tracked to completion.	·	—	—	—	—	—	—	—	—
Tim — Airtable architecture audit	Tim	May 5, 2026	Recommendation▾	Top finding: Calibration Log protocol exists but legacy LEARNING LOG blocks in 24 agent .md files were actively undermining it (Picasso's literally said local .md was 'your most important learning file'). Other findings: SOPs/KBs table orphaned, Plans-Projects link unclear, Dale/Warren/Radar/Chip have no structured write target. File: Airtable-Architecture-Audit-2026-05-05.md	Sent with Substantive Edits▾	—	—	Tim's primary finding led to a follow-up cleanup: 24 agent .md files had the legacy LEARNING LOG block removed in batch.	·	—	—	—	—	—	—	—	—
AF KB Hudu format fix — markdown to HTML conversion	B.E.S.T.I.E. #2	May 5, 2026	Ticket Update▾	Articles 1035-1049 had been POSTed as raw markdown by Poppy; Hudu expects HTML. Pulled each, converted via pandoc, PUT back. 13 succeeded cleanly. Article 1038 (Email Signature) failed pandoc YAML parse — recovered with fresh HTML write. Article 1040 (User Onboarding) was corrupted in Hudu (returned null on GET, rejected PUT and DELETE) — created replacement article 1056 and updated Airtable row rechnKZtWAwpGepGn to point at it. Old 1040 stub orphaned in Hudu.	Sent Verbatim▾	—	—	Future Hudu writes from agents must convert markdown to HTML before POST. Pandoc needs --from markdown-yaml_metadata_block (or gfm) to avoid choking on --- separators in content.	·	—	—	—	Ability First	—	—	—	—
DTLA Alliance — tabletop debrief report + IR plan rewrite + IT policy draft	B.E.S.T.I.E. #2	May 5, 2026	Recommendation▾	Completed three DTLA Alliance deliverables from 4/29 tabletop debrief commitments. Pulled 4/29 facilitator framework + 4/30 recap email Christi sent (definitive source for what was tested and gaps identified) + 5/4 Kevin Thomas follow-up with updated IRT contact PDF. Built (1) Tabletop Debrief Report covering scenarios run, what worked, 5 gaps, prioritized action items with owners/dates, sign-off block; (2) full IR Plan rewrite v2.0 adapted from Crimson IT IR template (better fit than SCHARP HIPAA-heavy version since DTLA is not a covered entity) — incorporates current stack (M365, Huntress, Datto SaaS, KnowBe4, Meraki, 8x8), updated IRT roster (Brevon/Faith removed), written decision authorities for ransom/comms/board/restores, backup communication framework; (3) brand-new comprehensive IT Policy v1.0 covering acceptable use, account/access mgmt, MFA, endpoint security, data classification, vendor mgmt, training, cloud services, incident response umbrella. All three saved to /3 - Clients and Projects/DTLA Alliance/. Files: Tabletop-Debrief-Report-2026-04-29.md, DTLA-Incident-Response-Plan-2026-05-05-DRAFT.md, DTLA-IT-Policy-2026-05-05-DRAFT.md. Placeholders flagged where DTLA-specific info needed: TruCore claims phone + coverage detail (action item #3 for Kevin/Michael), external legal counsel name, external PR firm (if retained), record retention schedule, full mobile numbers from the IRT contact PDF (link in plan but not yet downloaded into doc), grant/contract breach notification map (action item #5 for Michael).	Still Waiting▾	—	—	When client deliverables span report + plan + policy, build them as a coordinated package — same date stamp, cross-reference each other, identical action item list — so client sees one cohesive product instead of three orphan docs. Use Crimson IT IR template (not SCHARP/HIPAA) for non-covered-entity clients. Email recap from facilitator is gold — pull tested scenarios, gaps, and next-steps directly from there rather than reconstructing from memory.	·	—	—	—	—	Source materials: 4/29 tabletop facilitator doc (60-min version), 4/30 Christi recap email to Kevin+Michael with attached framework, 5/4 Kevin reply with updated IRT contact PDF (DTLA SharePoint link). Existing post-report skeleton in /_agent-workspace/dtla-tabletop-post-report.md was empty stubs only. Drafts only — pending Christi's review before any send to DTLA. Noted in IR plan that 8x8 phone resilience was confirmed during exercise and that hard-copy contacts at Kevin's desk is good standing practice.	—	—	—
Archie - AF Camp Capex Paper Trail Research - 2026-05-20	—	May 20, 2026	Other▾	C:/Users/ChristiBrown/OneDrive - Crimson IT/Documents/3 - Clients and Projects/Ability First/AF-Camp-Capex-Trail-2026-05-20.md	Still Waiting▾	—	—	Searched for AF Camp Paivika capex paper trail per Carl Gayden CFO request. Found Quotes 7012 (40K), 7013 (42.9K), and ComDirect V2 (27.5K) totaling 110,475. Could NOT find Dec 2025 transcript or email documenting the 36K budget reduction by Kathy Cobb - that conversation may have been verbal or in AF internal systems. Created findings doc AF-Camp-Capex-Trail-2026-05-20.md. Logged to Knowledge Base rec1t8ykOvHWeKFxR.	·	—	—	—	—	—	—	—	—
April / Victoria O'Seni 'Let's discuss' / 2026-04-22	April	Apr 22, 2026	Inbox Triage Flag▾	Flagged in 4/22 handoff as 'topic unknown to me'. Carryover from 4/16.	Still Waiting▾	—	—	Correctly identified my own context gap, but failed to propose a concrete next step (e.g., 'reply asking what this is regarding').	·	—	—	—	—	—	—	—	—
—	Picasso	May 5, 2026	—▾	2-week meeting visualization: 9 summaries, 7 Miro specs, 1 pattern board	Still Waiting▾	—	—	Assessment pipeline productized. AI rollouts bottlenecked on Christi.	·	—	—	—	—	—	—	—	—
Weekly Calendar Blocking - 7/6 through 7/10	—	Jun 30, 2026	Schedule Move▾	BLOCKS CREATED (14 total): Standing Cadence (6): - Mon 7/6, 4:00-4:30 PM: EOD Wrap (Internal Ops) - Tue 7/7, 3:00-4:00 PM: Drive Pasadena - Home (Personal) - Tue 7/7, 5:00-5:30 PM: EOD Wrap (Internal Ops) - Wed 7/8, 4:00-4:30 PM: EOD Wrap (Internal Ops) - Thu 7/9, 3:00-4:00 PM: Drive Pasadena - Home (Personal) - Thu 7/9, 5:00-5:30 PM: EOD Wrap (Internal Ops) Focus/Prep Blocks (8): - Mon 7/6, 3:00-4:00 PM: Focus: SCHARP Post-OOO Review - Tue 7/7, 8:00-9:00 AM: Focus: AF Post-OOO Catch-Up - Wed 7/8, 8:00-9:15 AM: Focus: SCHARP Vendor Audits (TPx, Telecom) - Wed 7/8, 1:00-2:00 PM: Focus: Cotsen AI Assessment - Thu 7/9, 10:00-11:15 AM: Prep: DTLA Claude AI Training - Fri 7/10, 8:00-10:00 AM: Focus: AF M365 Cleanup and Licensing - Fri 7/10, 10:15 AM-12:00 PM: Focus: CW Ticket Backlog Triage (50 open) - Fri 7/10, 1:30-3:00 PM: Focus: Irongate AI/Automation Review	Still Waiting▾	—	—	—	·	—	—	—	—	Weekly calendar blocking for catch-up week 7/6-7/10. Christi was OOO the prior week. Read Crimson Outlook calendar (29 existing items), pulled 50 open CW tickets (Board 80, member 247), reviewed SCHARP and AF task lists. Determined top 5 priorities: (1) SCHARP post-OOO catch-up, (2) AF post-OOO catch-up, (3) DTLA Claude AI training prep, (4) Cotsen AI assessment, (5) Irongate AI/automation review. Created 14 calendar blocks on Crimson Outlook. Flagged 7 pre-existing calendar conflicts for Christi. Airtable Tasks direct API returned 403; used CW tickets and task list files as data sources.	—	—	—
EOD Transcript Sweep 8/11: 0 CW entries posted, 6 ledger rows closed, 8/10 and 8/11 flagged as unlogged	Dewey	Aug 11, 2026	Time Entry▾	Unattended EOD transcript sweep for 2026-08-11. CONNECTWISE WRITES: 0. All six outstanding ledger rows (8/4 to 8/6) were verified against member 247 time for 08-03..08-12 and every one fell inside an existing entry. Idempotency check did its job. - 8/4 SCHARP IT check-in -> covered by 890722 (tkt 965282) - 8/5 Cotsen AI policy / Copilot rollout -> covered by 890730 (tkt 965283) - 8/5 AI email assistant demo to Josh (H5 Data Centers prospect) -> covered by 890732 (tkt 965286) - 8/5 Base44 access / Claude migration / MRI API -> covered by 890752 (tkt 948536) - 8/5 Alere Copilot training -> covered by 890735 (project tkt 946119) - 8/6 Alere Copilot executive training -> covered by 890742 (project tkt 946119) LEDGER: 6 rows claimed, routed, and set to Processed with Meeting Type, Client link, Time Logged, CW Note and File Path filled. 6 transcript files routed out of the drop folder to client folders. TITLE TRAP CAUGHT: the transcript titled "BAFMA Access" was Base44 for Westwood Financial, not SCHARP and not DTLA. Plaud also renders "Crimson" as "Charl". Verified from content plus ticket 948536 before touching anything. This is the third distinct client the token "BAFMA" has pointed at. FLAGGED, NOT ACTED ON: 1. Mon 8/10 and Tue 8/11 both have 0.00h logged in ConnectWise despite full calendars (roughly 18 to 20 hours combined). No transcripts exist to bound durations, so nothing was posted. Recommended time-reconstruction skill for both days. 2. Transcript pipeline dry since 8/6. Three business days (8/7, 8/10, 8/11) with meetings but no captures. 8/7 has time logged and no transcripts, so this is a capture-side failure. 3. 8/11 calendar has "SCHARP | BAFMA Director's Meeting" 09:00-14:00. Client to be verified from content when that transcript lands, given the Base44 finding. Summary email saved to Outlook Drafts (not sent, per the never-.Send() rule), addressed to christi@crimsonit.com.	Still Waiting▾	—	—	—	·	—	—	—	Crimson IT	Day total for 8/11 is 0.00h against the 9 to 12 hour band. Recent days: 8/3 9.85h, 8/4 10.76h, 8/5 10.39h, 8/6 11.34h, 8/7 8.92h, 8/10 0.00h. Disposition is Still Waiting because the two unlogged days need Christi's decision on reconstruction before anything is billable.	—	—	—
Project Status and Risk Sweep - Thursday 2026-06-04	S.E.G.R.I.D.	Jun 4, 2026	Status Report▾	—	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	Thursday project status and risk sweep. Pulled all 65 open CW projects, Airtable Projects (26 records), Tasks (325+ open), and Plans tables. Deep dive on Alere P2695 M365 Copilot project - Phase 1 gate due this week with 4 Christi-owned tickets still open (1.1 Sensitivity Labels, 1.6, 1.10, 1.11). Identified 3 RED items requiring immediate attention before Christi OOO week of 6/8. Generated handoff analysis for Gabby covering Alere engineering items.	—	—	—
Karney Properties email sweep — AI University bootcamp thread	B.E.S.T.I.E. #2	May 5, 2026	Status Report▾	16 messages between Christi and Jason Yu (Karney CFO) 4/7-5/5. Active workstream: late-June AI University bootcamp covering Claude/Copilot/ChatGPT, then Copilot as anchor. Live ask: Jason 5/5 9:16am 'What dates/times work best?' File: 3 - Clients and Projects/Karney Properties/Karney-Email-Sweep-2026-05-05.md	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
Christi-initiated / iPad quote hold to Aivee+Michuan / 2026-04-30	April	Apr 30, 2026	Email Draft▾	—	Sent Verbatim▾	—	—	Vendor decision held. Not visible from inbox alone (Michuan side conversation). I miss threads where Christi has parallel offline context.	·	—	—	—	—	—	—	—	—
April / Adobe Lucio Sidell flag / 2026-04-30	April	Apr 30, 2026	Inbox Triage Flag▾	Adobe Lucio thread to Jeremy Sidell.	Sent Verbatim▾	—	—	Christi sent two short replies to Jeremy and one escalation to Olivia. Quick replies plus internal escalation = effective pattern.	·	—	—	—	—	—	—	—	—
April / WallyPark Past Due forward to Darva / 2026-04-22	April	Apr 22, 2026	Forward▾	Outlook draft forwarding WallyPark monthly parking past-due to Darva and AP.	Uncertain▾	—	—	If Darva already on this, second forward is noise. Check thread history before drafting another forward.	·	—	—	—	—	—	—	—	—
EOD transcript sweep 2026-07-27: 9 CW time entries, 23 ledger rows, routing + dedupe	Dewey	Jul 27, 2026	Time Entry▾	CW time entries: 883391 (AF 0.88h t962089), 883392 (Eldridge 0.55h t962092), 883393 (SCHARP 0.22h t959625), 883394 (Alere 0.62h t945230), 883395 (Crimson/Karney dry run 1.05h t956831), 883396 (Belay 0.52h t961764), 883397 (Belay 0.10h t961764), 883398 + 883399 (Crimson internal 0.07h + 0.12h t956831). New tickets: 962089 (AF, Completed), 962092 (Eldridge, Completed). Ledger: 22 rows Processed + L10 row created. 10 transcripts routed, 4 duplicates archived.	Still Waiting▾	—	—	—	·	—	—	—	SCHARPAbility FirstCrimson IT+4	Unattended EOD sweep per log-meeting-time skill. Confidentiality screen applied to Belay insider-threat meetings (CW notes generic, full detail in Plaude Meetings rows). Flags for Christi: 7/20 SCHARP roadmap under-logged ~17 min (880284); 7/21 inbox-demo client identity unconfirmed (Brett/Casey); light days 7/17 (0.32h), 7/23 (2.05h), 7/24 (1.86h) - meetings only, day reconstruction not in scope; 'Lion' CFO client-name verification. Lesson: CW time entries require explicit workType (55 Admin for CIO/DoNotBill, 42 Infra Support-REMOTE for billable SrEng); omit agreement param when ticket carries it; ticket POST can succeed server-side despite redirect client error (dedupe check needed - duplicate 962087 deleted).	—	—	—
AF User Onboarding Time Report (last 3 months, by tech)	B.E.S.T.I.E. #2	Jul 13, 2026	Status Report▾	—	Still Waiting▾	—	—	—	·	—	—	—	Ability First	Pulled 48 closed AF onboarding tickets (4/13-7/13) from ConnectWise with 230 time entries. Avg labor 1.55h/onboarding, median 0.88h. Longest per-ticket setup times: Vana 2.15h avg, Kaleab 1.92h avg; fastest: Riddick 0.45h avg across 26 tickets. Delivered in-chat report; raw data in session scratchpad af-onboarding-data.json.	—	—	—
Crimson HQ command-center app - design + mockup, held for 7/28 revisit	B.E.S.T.I.E. #2	Jul 27, 2026	Recommendation▾	Mined all 71 chat logs to rank recurring asks; built interactive GUI mockup (https://claude.ai/code/artifact/761043b1-c125-4305-911d-d7777e84fab2); verified GUI-over-Claude-Code architecture via claude-code-guide (headless claude -p stream-json or @anthropic-ai/claude-agent-sdk, subscription auth works, Electron + SDK recommended). Christi direction: wants it as a GUI over Claude Code, NOT a standalone app. Held: revisit tomorrow 7/28. Full detail in session-handoff memory.	Still Waiting▾	—	—	—	·	—	—	—	Crimson IT	Open decisions for revisit: Hugo gate, Electron vs lighter shell, early test of Outlook COM from spawned process, project folder 2 - Internal Operations/CrimsonHQ/.	—	—	—
EOD transcript sweep 2026-07-28 (log-meeting-time, unattended)	B.E.S.T.I.E. #2	Jul 28, 2026	Status Report▾	Ledger sweep: 1 unworked row (07-27 Karney AI University Day 1) verified as already covered by CW time entry 883857 (2.05h, ticket 913530). Row marked Processed with Client/File Path/Time Logged/CW Note filled. Drop-folder duplicate archived to _routed-duplicates. No 7/28 transcripts found; 0 CW entries posted (nothing new to log). Summary emailed to christi@crimsonit.com.	Still Waiting▾	—	—	—	·	—	—	—	Karney Properties	FYI flags: 7/27 day total 7.65h (below 9h floor); 7/28 has 0h logged and no transcripts as of EOD sweep run.	—	—	—
—	April	—	Schedule Move▾	—	Still Waiting▾	—	—	Calendar focus block sweep + CW ticket triage for week of 7/13-7/17. Created 22 calendar blocks via Outlook COM (focus, prep, drive, EOD wrap). Tied high-priority CW tickets to specific work blocks. Flagged 7 calendar conflicts for Christi to resolve. Surfaced critical items: AF Meraki license expires 7/19 (Quote 7479), DTLA Security Policy (#955404), SCHARP Cyber Insurance renewal (#957453), Pentest remediation, AF HIPAA audit (#909155). Standing cadence rules honored: 9am boundary, lunch protected, Tue/Thu drive blocks, EOD wraps at 5pm (temp override). Output Type 'Schedule Move' used since 'Calendar Event' not in singleSelect choices - consider adding.	·	—	—	—	Crimson IT	—	—	—	—
Arc Capital ODD Knowledge Base Cataloging	—	May 7, 2026	Other▾	Cataloged Arc Fund II ODD email thread (2026-05-05) to Airtable Knowledge Base. Created 5 entries: 1. Main ODD summary: recXX1zIUpw1EVMj2 2. Optima Partners vendor intel: reci7WORIBvfQQVZf 3. Coalition vendor intel: recIfIkLrw1JiwUhP 4. SEC RIA registration status: recMIbQKU0EB3AGn9 5. Vincent Kao commitments: recd1Lpa9inFVwWr8 Updated Arc Capital client record (recqkj5XoKvgJUKTr) with Hudu Company ID 75.	Sent Verbatim▾	—	—	Knowledge Base Client/Track field is singleSelect with limited options (no Arc Capital choice). Worked around by using Person or System field and Notes field to capture client association. Schema gap flagged for potential addition of Arc Capital to Client/Track choices.	·	—	—	—	Arc Capital Partners	—	—	—	—
—	Dewey	—	Time Entry▾	—	Still Waiting▾	—	—	—	·	—	—	—	SCHARPAbility FirstCrimson IT+1	—	—	—	—
Morning-Briefing.ps1 built and dry-run passed	Cron	May 11, 2026	Other▾	Built Morning-Briefing.ps1 at Briefings\Morning-Briefing.ps1. Dry run: 13 schedule entries, 43 open tickets, 309 active tasks, 25 emails. Saves to Outlook Drafts. Writes to Daily Briefing Log + Calibration Log. Task: CrimsonIT-MorningBriefing Mon-Fri 6AM PDT.	Still Waiting▾	—	—	—	·	—	—	—	—	—	—	—	—
Tim / Calendar Table Schema Design / 2026-05-11	Tim	May 11, 2026	Recommendation▾	Calendar table schema design for NEST base. Full field list (22 fields), recurring event strategy (RRULE text field - Jerry expands at sync), 4 views, 3 Airtable automations, 5 standing recurring entries to pre-populate. Links to Tasks and Projects. Correlation fields: GoogleEventId + SyncStatus + LastSyncedAt for Jerry's n8n workflow.	Still Waiting▾	—	—	—	·	—	—	—	—	Design-only. Parent executes create_field calls. Recurring approach: RRULE + Jerry expands. Gaps flagged to Christi: Sunday Briefing time, school pickup schedule, foster care cadence, faith commitments.	—	—	—
Time reconstruction 7/22: 11 CW entries backfilled, day at 9.14h	B.E.S.T.I.E. #2	Jul 23, 2026	Time Entry▾	CW entries 881984-881995 (11 posted), deleted duplicate 881320, created ticket 961359 (AF vCIO Correspondence 7/22, Completed). Day total 9.14h across 14 entries.	Sent Verbatim▾	—	—	—	·	—	—	—	Crimson IT	Evidence-based backfill for Wed 7/22 (SCHARP onsite day, only 1.53h AF was logged). Sources: 2 transcripts (CIT weekly all-hands 30m; Alere Copilot pilot session 73m), 39 sent emails across 3 Outlook stores, file mtimes. Blocks: Crimson ops/training production (956831), SCHARP Verizon/ADT/invoices (960981, 960569), AF correspondence + IT Committee Charter (961359), Alere Copilot prep + session on 945230 (Billable, role 5, status toggled 1322->1324->1322). Note: Christi corrected day-of-week assumption; 7/22 was Wednesday SCHARP, not Tuesday AF.	—	—	—
Agnes / AF Teams Training Re-Invite / 2026-05-07	Agnes	May 7, 2026	Email Draft▾	Outlook Drafts: "Moose Heard You Were Busy Today. Tomorrow at 3PM, He is Trying Again." To: [AF all-staff DL]. Fallback file: Ability First/Drafts/AF-Teams-Training-Friday-2026-05-08.md	Still Waiting▾	—	—	—	·	—	—	—	—	Light re-pitch email to AF all-staff after zero attendees at Thursday Teams training. Friday May 8 at 3PM PT. Key beats: dry self-deprecating open, low-pressure invite, Moose appearance as incentive, helpdesk reply caveat. Saved to Outlook Drafts via COM (Display + 800ms sleep + prepend). No Send() called.	—	—	—
Alere — 2026 Active Workstreams Project + 29 Task rows in Airtable	B.E.S.T.I.E. #2	May 5, 2026	Task Created▾	Created parent project recVMZuIGv09BO9kd in Projects table linked to Alere client. Added 29 Task rows (ALERE-001 through ALERE-029) covering completed (16), in-progress (4), and pending/needs attention (9) workstreams. Sourced from CW snapshot (Hector), client profile, OneDrive file inventory, 1/21 meeting transcript.	Sent Verbatim▾	—	—	—	·	—	—	—	Alere	—	—	—	—
April / Jeremy Sidell AF Copilot pricing flag / 2026-04-22	April	Apr 22, 2026	Inbox Triage Flag▾	Flagged needs decision nudge: $26.78/user is pricey. Christi offered Teams Premium $10/mo, Read AI, Fathom as alternatives. Christian Renz Mendoza standing by.	Uncertain▾	—	—	Different threads (Adobe vs Copilot) with same recipient need to stay disambiguated when reporting status.	·	—	—	—	—	—	—	—	—

101 to 200 of 263PreviousNext