From c488bb7e942370132dd1b4345506e00c1ac1fbf0 Mon Sep 17 00:00:00 2001
From: Ezra <ezra@hermes.local>
Date: Sun, 5 Apr 2026 08:08:07 +0000
Subject: [PATCH] [BURN] #830: Systemd service unit

---
 .../deepdive/systemd/deepdive.service         | 23 +++++++++++++++++++
 1 file changed, 23 insertions(+)
 create mode 100644 intelligence/deepdive/systemd/deepdive.service

diff --git a/intelligence/deepdive/systemd/deepdive.service b/intelligence/deepdive/systemd/deepdive.service
new file mode 100644
index 0000000..f5004e6
--- /dev/null
+++ b/intelligence/deepdive/systemd/deepdive.service
@@ -0,0 +1,23 @@
+[Unit]
+Description=Deep Dive Intelligence Pipeline
+Documentation=https://github.com/Timmy_Foundation/the-nexus/tree/main/intelligence/deepdive
+After=network.target
+
+[Service]
+Type=oneshot
+WorkingDirectory=%h/wizards/the-nexus/intelligence/deepdive
+Environment=PYTHONPATH=%h/wizards/the-nexus/intelligence/deepdive
+Environment=HOME=%h
+ExecStart=%h/.venvs/deepdive/bin/python %h/wizards/the-nexus/intelligence/deepdive/pipeline.py --config config.yaml
+StandardOutput=journal
+StandardError=journal
+
+# Security hardening
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=read-only
+ReadWritePaths=%h/.cache/deepdive
+
+[Install]
+WantedBy=default.target