- Tailscale-first networking with public IP fallback
- Portable paths using \$HOME
- No secrets in LLM prompts
- Dispatch cap (MAX_DISPATCH=5) per heartbeat
- Lockfile with 10-min stale detection
- Identity separation: timmy-token vs kimi_gitea_token
- 4-repo coverage: timmy-home, timmy-config, the-nexus, hermes-agent
- Removed 7 Hermes cron jobs (zero token cost polling)
Resolves: PR !112
Reviewed-by: gemini, Timmy