# Offline preparation: side-conversation inspection

Date: 2026-09-28. Profile: ltb1021. Scope: read-only host and source inspection.
No package, permission, firewall, Runtime, authentication, model, or repository changes.

## Local LLM

ICERTI AI has completed GGUF files in the si Hugging Face cache, including
Gemma-4-26B-A4B, Qwen3.8-27B, Muse-Glimmer-30B, and MiniMax-H3 variants.
This confirms model-file preparation, not runnable inference acceptance.
No matching Ollama/vLLM/llama-server service, container, image, or running process
was found by the bounded inventory; those commands were absent from the checked PATH.
Do not delete, relocate, or load these models as part of Contextra preparation.

## Web registration versus Redis network access

Read current Java source under the running 101 Java application's working directory.
ManagedTokenService.java lines 424-435 register AI connection information on login.
DefaultAiConnectionRegistrar.java lines 40-67 store Redis endpoint/credentials,
connection version, and the trust anchor. RecManagedConfiguration.java lines
201-207 call openIfNotReady for the advertised AI endpoint.
These operations do not replace the AI host's firewall configuration.

The ICERTI AI host has DOCKER-USER -> CTX-ICERTI-REDIS for its published Redis
address/port. The dedicated chain permits one configured Web peer and drops others.
contextra-redis-access.service reapplies the dedicated redis-access.sh policy.
Moving the servers requires reconciling the Web source address, AI published
address/port, Compose bindings, login connection data/version, and certificate SAN.
WSS success alone does not prove Redis reachability. No login/API mutation was run.
101 source inspection is not proof of identical code on the relocated Web server.

## Korean terminal support

The si SSH session uses UTF-8; Python preferred/stdout/filesystem encodings are UTF-8.
Korean round-trip and SSH output passed. fonts-nanum is installed.
The physical tty uses a Fixed console font, with no GUI session or fbterm/kmscon
found. Its Korean glyph rendering was not visually verified.
Prepare Korean menus for SSH/GUI and an explicit ASCII/English numbered fallback
for physical-console recovery; do not change the system locale globally by default.

## Permission plan (not applied)

Give si traversal/list access to workspace and Contextra parents. Give the owned
source/setup and ordinary data work areas read/write access, preserving existing
service UIDs and using scoped group/ACL inheritance as appropriate.
Keep privileged launchers, deployment state, private credentials, DB internals,
and active model releases protected; controlled menu actions perform their changes.
Data moves/deletions with ledger implications use the managed cleanup path.
Image preparation/source activation remains deferred until the Crowd patch ends.