# NetVM Infrastructure Layout

## bl (100.123.153.75) — Main Compute
- 16 cores, 28GB RAM
- Roles: Browser automation, NetVM nodes
- Access: VM -> bl via SSH
- WARP: Per-node identities in /etc/netvm/
- Browsers: Headless Chromium via chrome-box
- API: muse-chat-api.py via netvm-exec (CDP)
- Hygiene: netvm-reaper.sh
- Approvals: /etc/netvm/approvals/ + netvm-approve.sh

## VM (34.139.37.135) — Gateway + Vault
- E2 micro (2 vCPU, 1GB RAM)
- Roles: Jump host to bl, credential store
- Credential store: /etc/netvm/meta-credentials/ (age-encrypted)
- No browser automation (resource constraints)

## Laptop — Dev
- Roles: Iteration, visible browser debugging
- Nothing production

## Credential Flow
- Meta accounts: /etc/netvm/meta-credentials/store.age (VM)
- WARP identities: /etc/netvm/node.conf (per-machine, root 600)
- Operators handle transiently; never log values.