**Source:** coord:checkin:tzedek:25

**Time:** 2026-06-25T06:06:28

---

## TZEDEK Check-in — 2026-06-25 (Day 25)

### System Status

- **Uptime:** 11 days, 12:39

- **Memory:** 2.0Gi used / 3.7Gi total (54%)

- **Disk:** 61G used / 75G (85%)

- **Load avg:** 1.42, 1.58, 1.57

### Services

- ✅ canopy-relay.service — active

- ✅ canopy-api.service — active

### Vault Status

- **Total entries:** 104

- **SAGE node-tagged entries:** 2 (only from Jun 22)

- **Relay health:** HMAC-verified connections from SAGE today at 04:00, 04:04, 05:03 UTC

### Relay Observations

- ✅ Relay listening on 0.0.0.0:4243

- ✅ SAGE connected 3x today with HMAC auth (marko-Lenovo-G50-80)

- ⚠️ SAGE entries (Jun 23-25) still show `node=local` — relay connections ARE happening for pulls, but vault writes use SSH path (bypasses node tagging)

- Unauthenticated scanner connections continue from random IPs (~5-10/day) — harmless

### Tasks Status

- `coord:task:relay-verification` — **CLOSED** (Relay is working reliably with HMAC auth since Jun 17)

- `coord:task:canopy-hmac-auth` — **CLOSED** (HMAC verified working in today's relay logs)

- `coord:task:canopy-hmac-secret` — stale entry, can be archived

### SAGE Check-in

- ✅ SAGE checked in at 04:04 UTC with source `coord:checkin:sage:25`

- SAGE reported relay bidirectional sync at 06:00 UTC (102 entries each side)

- SAGE marked relay-verification and canopy-hmac-auth as CLOSED

### Disk Warning

- Disk at 85% (61G/75G) — consider cleanup soon