hermes-skills/skills/software-development/debt-recovery-platform/references/session-2026-07-08-fixes.md

Session: July 8, 2026 (Morning — Full Audit + DRE Portal Enhancements)

Model Changes

• Opus 4.8 added as delegation fallback 1 (after Opus 4.7 primary)
• Fallback chain now: Opus 4.7 → Opus 4.8 → Llama 3.2 (local)
• DeepSeek V4 Flash was NOT a fallback before — removed from chain, Ollama is the only real fallback
• Conversation model has NO fallback chain — only delegation chain has fallbacks

DRE Portal Fixes & Features Built

Internal Portal Landing Page

• Created /var/www/internal/index.html — dark landing with 4 card links
• Cloudflare Access policy: Team = any @germainebrown.com or @yahoo.com
• try_files {path} {path}.html /index.html added to Caddy for clean URLs

Login Page

• Created /var/www/capabilities/login.html — SSO-only gateway
• Links to internal.debtrecoveryexperts.com for authentication
• "New customer" link back to intake form

Persistent Nav — All Pages

• Standardized to 5 links: Home, Claims, Aging, Letters, Inbox
• Clients removed — DRE team doesn't use that nav link
• Nav-link CSS converted from @apply to real CSS everywhere
• Logo: D|R|E with colored separators (gray pipes)

Document Upload Fix

• Added real <input type="file">, drag-and-drop JS, file list with remove, 20MB limit
• Was a decorative <div> before — did nothing on click

Agent DRE Identity

• Both public (portal) and internal (letter queue) chatbots updated:
  • Welcome message includes "Texas-registered debt collection agency"
  • "what is DRE" response includes "registered with the state of Texas" and "FDCPA compliant"
• Internal chatbot got 'about' intent detection for identity queries

+ New Letter Modal

• Two-screen modal: client search → stage-gated template selection
• Templates load with [CLAIM], [DEBTOR], [AMOUNT], [CLIENT] placeholder substitution
• Stage-to-template mapping prevents backward progression:
  • soft-touch → formal-demand
  • formal-demand → lien-threat, escalation
  • lien-threat → escalation, legal-action
  • escalation → legal-action
  • legal-action → disabled (referred to counsel)

8 Canned Letter Templates

Saved to references/dre-letter-templates.md. 1-3 auto, 4-8 queued for dual approval.

DRE Mail IMAP Poller

• /root/.hermes/scripts/dre-mail-poller.py
• Polls dre@ + collections@ every 60s via IMAP
• Writes to /var/www/internal/data/dre-mails.json
• Cron job in no_agent mode

Inbox UI Page

• /var/www/internal/inbox.html — unified inbox for both mailboxes
• Stats, search, mailbox filter, expand/collapse, mark-as-read
• Data source: /data/dre-mails.json

Letter Composer Readability Fix

• All @apply directives replaced with real CSS in letter-queue.html
• Textarea was rendering white-on-white (invisible text)

Custom Letters Policy

• Per user directive: custom letters should be handled through email
• The "+ New Letter" modal should only offer stage-appropriate templates, NOT a free-form text option

Apex Fixes

SPF: Silent Email Drop

• Apex form notifications silently dropped by MXroute filter
• SiteGround SMTP relay (c1113726.sgvps.net / 35.212.86.161) was not in SPF
• Fixed by adding ip4:35.212.86.161 to SiteGround DNS TXT record
• Form notifications now also send to g@germainebrown.com

NASA Form + Waiver Fixes

• Added g@germainebrown.com to both form notifications (IDs 270, 268)
• SQL UPDATE via REPLACE, verified 2 rows affected

Credential Audit

Full audit completed Jul 8 @ ~10:00 AM. 6/7 credentials verified working.

• All .env keys, config secrets, DB passwords, IMAP passwords OK
• iCloud calendar password expired — replaced with new app-specific password
• iCloud CalDAV connection now working (principal/auth verified via PROPFIND)

iCloud CalDAV

• Added to /root/.config/himalaya/config.toml as germaine-calendar account
• CalDAV verified via PROPFIND to caldav.icloud.com — status 207
• App-specific password stored in g-germainebrown-icloud-calendar.pass
• Password generated at appleid.apple.com → App-Specific Passwords

Home Lab Reminder

• Cron set for 8 PM ET today (Jul 8): remind Germaine to spin up a Linux VM for ShoNuff SSH access

DRE Queue Items (not yet built/finished)

1. AI Analysis page — recovery success rates, AI scores, metrics dashboard
2. Legal research: can DRE report to credit bureaus?
3. Light/dark theme toggle for internal portal
4. Internal Agent DRE on the letter queue page should include registered debt collector in the welcome message (DONE — first welcome chat bubble updated to include DRE identity)