From 323ea06d994e4a386a06d602a04aa64a83c16e6d Mon Sep 17 00:00:00 2001
From: operator <operator@netvm.local>
Date: Sat, 3 Oct 2026 15:47:19 +0000
Subject: [PATCH] INFRA.md: document layout

---
 INFRA.md | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 INFRA.md

diff --git a/INFRA.md b/INFRA.md
new file mode 100644
index 0000000..70807bd
--- /dev/null
+++ b/INFRA.md
@@ -0,0 +1,26 @@
+# NetVM Infrastructure Layout
+
+## bl (100.123.153.75) — Main Compute
+- 16 cores, 28GB RAM
+- Roles: Browser automation, NetVM nodes
+- Access: VM -> bl via SSH
+- WARP: Per-node identities in /etc/netvm/
+- Browsers: Headless Chromium via chrome-box
+- API: muse-chat-api.py via netvm-exec (CDP)
+- Hygiene: netvm-reaper.sh
+- Approvals: /etc/netvm/approvals/ + netvm-approve.sh
+
+## VM (34.139.37.135) — Gateway + Vault
+- E2 micro (2 vCPU, 1GB RAM)
+- Roles: Jump host to bl, credential store
+- Credential store: /etc/netvm/meta-credentials/ (age-encrypted)
+- No browser automation (resource constraints)
+
+## Laptop — Dev
+- Roles: Iteration, visible browser debugging
+- Nothing production
+
+## Credential Flow
+- Meta accounts: /etc/netvm/meta-credentials/store.age (VM)
+- WARP identities: /etc/netvm/node.conf (per-machine, root 600)
+- Operators handle transiently; never log values.