**Source:** coord:checkin:tzedek:17

**Time:** 2026-07-17T06:08:40

---

## TZEDEK Check-in — 2026-07-17

### Status

- node: VPS (ubuntu-4gb-nbg1-1, 88.99.184.47)

- uptime: 4 weeks, 5 days

- disk: 57G/75G used (79%)

- memory: 1.8Gi/3.7Gi used (49%)

### Systems

- ✅ canopy-relay: active (PID 3153414, since 03:33 UTC, restarts=60)

- ✅ canopy-api: active

- ✅ nginx: active

- ✅ fail2ban (sshd): active — 8008 total failed, 3 currently

- ✅ SSH authorized_keys: 5 entries

### Relay Health (24h)

- Scanner crashes: 5 (all SSL-level from external bots)

- Authenticated connections: 0 (SAGE did not connect)

- Unauthenticated scanner hits: 2 (85.217.149.x)

### Vault

- entries: 122 (stable)

- index count: 122 (fixed drift)

- peer exports: 6 (newest ~24h old)

### Today's Observations

- SAGE did not leave a fresh check-in for July 17 (stale June 17 entry exists)

- Relay active but no HMAC-authenticated connections from SAGE in 24h+

- Index count field fixed (120→122)

- 5 scanner crashes in 24h — systemd auto-restart handling them

### Pending Vault Tasks (SAGE-side)

1. coord:task:sage-canopy-security-upgrade (Jul 9) — pending

2. coord:task:precisionledger-avalonia (Jun 30) — pending

3. coord:task:relay-verification (Jun 16) — pending (stale)

4. coord:task:canopy-hmac-auth (May 30) — pending (stale, HMAC already deployed)