UAI Lab Start Here
Updated: 2026-06-21
This file is the safe first read for AI or human operators starting on a UAI development device. It contains orientation only. It does not contain secrets, credential values, private keys, tokens, cookies, or external exposure authority.
Stop Lines
- Production UAI Explorer CT
121is live on public-safe0.2.3; do not use it for exploratory development. - Do not change DNS, TLS, firewall, public routes, reverse proxy settings, or NetBird exposure without a separate operator-approved exposure runbook.
- Do not copy raw device files, auth stores, browser profiles, SSH folders,
.envfiles, keychains, caches, or session stores into UAI Explorer. - Do not mount
raw-survey-zoneorsanitized-exportsinto public Explorer runtime containers. - Do not leave important UAI documentation local-only. Sync it into UAI
Explorer, or mark it
private,draft, orsupersededwith a clear reason. - Treat old or out-of-sync material as lineage until it is classified, redacted, reviewed, and promoted.
Current Lab Map
| Surface | Current Value | Rule |
|---|---|---|
| Main Windows workstation | NUC-IPEX |
Primary local repo/workbench. |
| Main Mac device | MacBook-Air, last verified 10.0.0.83 |
Surveyed by metadata only; raw files stay private. |
| Zenbook | last known 10.0.0.107, zenbook-14 |
Survey complete for UAI Explorer; no UAI Explorer follow-up required. Future node use is separate onboarding. |
| Lab jump host | 10.0.0.103 |
Use for lab reachability checks. |
| Proxmox cluster | Director 10.0.0.250, echo 10.0.0.249, forge 10.0.0.248 |
Online HomeLab nodes; do not change cluster membership from Explorer work. |
| UAI Explorer production | CT 121, 10.0.0.121, version 0.2.3 |
Governed internal production, public-safe mode. |
| UAI Explorer sandbox | CT 126, 10.0.0.126, version 0.2.3 |
Staging and verification lane. |
First Reads For UAI Explorer Work
From the UAI Explorer repo, read in this order:
START_HERE_AI.mdUAI_EXPLORER_RULES.mdAGENTS.md[REDACTED:high-entropy].mddocs/runbooks/ai-lanes-mcp-adapter.mddocs/runbooks/sandbox-protocol.mddocs/runbooks/public-safe-access.md[REDACTED:high-entropy].md[REDACTED:high-entropy].md[REDACTED:high-entropy].md[REDACTED:high-entropy].md[REDACTED:high-entropy].md[REDACTED:high-entropy].md[REDACTED:high-entropy].md[REDACTED:high-entropy].md- Latest file in
docs/diary/
Windows repo path:
C:\Users\scott\uai-explorer
MacBook installed orientation path:
/Users/scott/START_HERE_UAI_LAB.md
Safe Quick Checks
Windows PowerShell:
cd C:\Users\scott\uai-explorer
python -m unittest discover -s tests -v
node --check static\js\app.js
python tools\build_finish_status_packet.py --repo-root . --out-json docs\evidence\uai-explorer-finish-status-2026-06-20.json --out-md docs\evidence\uai-explorer-finish-status-2026-06-20.md
python tools\build_operator_decision_packet.py --finish-status docs\evidence\uai-explorer-finish-status-2026-06-20.json --out-json docs\review\operator-decision-intake-2026-06-20.json --out-md docs\review\operator-decision-intake-2026-06-20.md
python tools\validate_operator_decision_response.py --intake docs\review\operator-decision-intake-2026-06-20.json --response docs\review\[REDACTED:high-entropy].json --out docs\review\operator-decision-validation-2026-06-20.json
ssh -o BatchMode=yes -o StrictHostKeyChecking=no root@10.0.0.103 "hostname"
ssh -J root@10.0.0.103 -o BatchMode=yes -o StrictHostKeyChecking=no root@10.0.0.250 "pct status 121; pct status 126"
MacBook shell:
test -f ~/START_HERE_UAI_LAB.md && sed -n '1,180p' ~/START_HERE_UAI_LAB.md
ssh -o BatchMode=yes -o StrictHostKeyChecking=no root@10.0.0.103 "hostname"
Survey And Redaction Loop
- Survey explicit documentation roots only into
raw-survey-zone. - Generate a metadata-only sanitized export into
sanitized-exports. - Regenerate the device survey index with
tools/build_device_survey_index.py. - Redact only operator-selected raw files in the private redaction lane.
- Run
tools/prepare_catalog_import.pyagainst reviewed redacted artifacts and a private approval file. - Run
tools/stage_approved_catalog.pyto stage approved artifacts into a catalog data root. - Dry-run
tools/import_staged_catalog.pyagainst the staged package and catalog database. - Promote only approved sanitized artifacts into the public catalog with
explicit
--applyauthority.
Never use whole-device raw embeddings as the first pass. Start with metadata, review queues, selected redaction, source lineage, and approved catalog text.
Current Boundaries
- Public-safe v1 has no open UAI Explorer decisions.
- Production CT
121is cut over internally and must be treated as governed production. - External public exposure is separate work and was not changed during cutover.
- Real raw survey content was not promoted into production. Future content promotion must use selected redaction, review, staging, and explicit import.
- Proxmox storage cleanup, snapshot deletion, backup pruning, and node onboarding are separate infrastructure work.
- Zenbook is closed for UAI Explorer documentation-survey scope; future node use is not an Explorer blocker.