Fleet Control Matrix
Canonical machine inventory · Local Web Control / Zero Trust readiness · Evidence-based completeness. GCS/storage is intentionally excluded as a machine and appears through node/KCC resource views.
Machines in canonical fleet19
Active-now control targets3
Fleet control completeness30%
Acceptance gates8
1. Inventory · 12.5%2. Role / capability · 12.5%3. Runtime identity · 12.5%4. Local Control · 12.5%5. Local health · 12.5%6. Tunnel config · 12.5%7. Zero Trust read-back · 12.5%8. Persistent heartbeat / KCC · 12.5%
A stopped VM is not marked failed, but unverified runtime/local-control/public-access gates do not receive credit. Public hostname source configuration alone never counts as Zero Trust read-back PASS.
| Machine | Version / OS | Role | Distinct advantage | Capabilities / installed function | Runtime | Completeness | 8 gates | Inspect | Policy | Truth notes |
|---|---|---|---|---|---|---|---|---|---|---|
KCSG1 kebunate-core-sg1 Linode · Singapore | Ubuntu 24.04.4 LTS Node Control Fabric · local :8787 · V3 standard assigned | Primary gateway / control runtime | MCPv4 + n8n + Gemini/Muse orchestration + self-hosted GitHub runner + canonical operator gateway | MCPv4n8nAI GatewayGitHub runnerKSANSControl API | ACTIVE / fresh heartbeat observed | 88% | ✓✓✓✓✓✓–✓ | ACTIVE NOW | External Zero Trust read-back remains separately gated; do not infer public PASS from source config. | |
KEBUNATE-VM kebunate-vm Google Compute Engine · asia-southeast1-b | Debian · kernel 6.1.0-51-cloud-amd64 Local Control V2 · eefa8435 · local :8792 | Core secondary worker / mirror candidate | Existing 100GB core worker; Loki/KSANS/evidence heritage; local-control V2 already runtime-verified | MISSION_EXECUTORCORE_RUNTIMEAPIREGISTRYQUEUEEVIDENCE | RUNNING · local control verified · persistent node heartbeat unproven | 75% | ✓✓✓✓✓✓–– | ACTIVE NOW | Run 32927399920 verified /, /healthz and /api/state locally. Public route and canonical persistent heartbeat are not yet verified. | |
Integration AI kms-ai-integration Google Compute Engine · asia-southeast1-b | Ubuntu 22.04.5 LTS Governed GCE/IAP lane · Local Control V3 target | Integration / webhook / MCP / E2E verification worker | Exact integration-role match; lightweight e2-micro; IAP SSH already proven; no conflicting control ports observed | INTEGRATIONWEBHOOKMCPE2E_VERIFYEVIDENCE | RUNNING · IAP identity verified · Local Control rollout pending | 38% | ✓✓✓––––– | ACTIVE NOW | Preserve /opt/kms-agent as evidence. Reuse existing KCSG1→GCE/IAP short-lived impersonation lane. | |
AI Engineering kebunate-ai-engineering-vm Google Compute Engine · asia-southeast1-b | Debian 12 Bookworm Existing Kebunate engineering bootstrap · V3 prestage | Heavy engineering / backend build-test worker | e2-standard-2 + 50GB balanced disk; existing Kebunate-native engineering bootstrap and status timer | ENGINEERINGBACKENDBUILDTESTVERIFY | TERMINATED · reuse candidate | 25% | ✓✓–––––– | WHEN STARTED | Do not start only to build dashboard; install Local Control V3 when workload starts node. | |
Video Factory kebunate-video-factory-vm Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Video / media factory worker | e2-standard-2 + 50GB disk for media workloads | VIDEOMEDIAASSET_PIPELINEVERIFY | TERMINATED | 25% | ✓✓–––––– | WHEN STARTED | Keep stopped until media capacity is required. | |
Audio AI kms-ai-audio Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Audio / media worker | Specialized small audio AI capacity | AUDIOMEDIAVERIFY | TERMINATED | 25% | ✓✓–––––– | WHEN STARTED | Dormant specialized capacity. | |
Content Master kms-ai-content-master Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Content production / copy / asset pipeline | e2-standard-2 + 40GB balanced disk; strong content-department candidate | CONTENTCOPYASSET_PIPELINEVERIFY | TERMINATED | 25% | ✓✓–––––– | WHEN STARTED | Activate only when content workload justifies compute. | |
KMS Engineer kms-ai-engineer Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | AI engineering worker | e2-standard-2 + 40GB specialized engineering capacity | ENGINEERINGBACKENDTESTVERIFY | TERMINATED · overlap review | 25% | ✓✓–––––– | WHEN STARTED | Compare with kebunate-ai-engineering-vm before activating duplicate capacity. | |
Finance AI kms-ai-finance Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Finance / revenue / cost reporting worker | Dedicated finance node; suited to read-only revenue and cost analytics | FINANCEREVENUECOSTREPORTVERIFY | TERMINATED | 25% | ✓✓–––––– | WHEN STARTED | Read-only finance first; no autonomous money mutation. | |
KMSX Legacy kms-ai-kmsx Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 blocked by role inspection | Legacy worker — role unverified | Existing dormant capacity but semantics must be inspected before reuse | VERIFY | TERMINATED · role unverified | 13% | ✓––––––– | DO NOT START AUTOMATICALLY | Do not infer purpose from machine name. | |
Market AI kms-ai-market Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Marketing / research worker | Dedicated lightweight market research capacity | MARKETINGRESEARCHREPORTVERIFY | TERMINATED | 25% | ✓✓–––––– | WHEN STARTED | Potential autonomous marketing-analysis node. | |
Manager Exec kms-ai-mgr-exec Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Management / executive coordination worker | Existing management capacity for reporting/coordination | COORDINATIONREPORTVERIFY | TERMINATED · overlap review | 25% | ✓✓–––––– | DO NOT START AUTOMATICALLY | May overlap KCSG1/Muse; reconcile before activation. | |
Orchestration Legacy kms-ai-orch-system Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 blocked by architecture review | Legacy orchestration worker candidate | Orchestration capacity exists but overlaps canonical KCSG1/Muse/n8n | ORCHESTRATIONROUTINGVERIFY | TERMINATED · control-plane overlap | 25% | ✓✓–––––– | DO NOT START AUTOMATICALLY | Never revive as parallel control plane. | |
Planner AI kms-ai-planner Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Planning / analysis / proposal worker | Dedicated planning capacity that can consume shared AI context without owning truth | PLANNINGANALYSISPROPOSALVERIFY | TERMINATED | 25% | ✓✓–––––– | WHEN STARTED | Central SSOT remains truth owner. | |
Video AI kms-ai-video Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Video AI worker | Small specialized video shard capacity | VIDEOMEDIAVERIFY | TERMINATED | 25% | ✓✓–––––– | WHEN STARTED | Compare against main Video Factory before activation. | |
Video AI Alt kms-ai-video-alt Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage | Alternate video worker | Extra video shard for burst capacity | VIDEOMEDIAVERIFY | TERMINATED | 25% | ✓✓–––––– | DO NOT START AUTOMATICALLY | Keep stopped until capacity is explicitly required. | |
Trader Node kms-trade-node Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 prestage · paper-only policy | Paper-trading / strategy verification node | Specialized trade node isolated from production capital | TRADERPAPER_TRADINGVERIFY | TERMINATED · live-capital Human Gate | 25% | ✓✓–––––– | DO NOT START AUTOMATICALLY | No live capital without explicit Human Gate. | |
KMSX Node kmsx-ai-node Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 blocked by role inspection | Legacy node — role unverified | Dormant e2-micro capacity | VERIFY | TERMINATED · role unverified | 13% | ✓––––––– | DO NOT START AUTOMATICALLY | Inspect before reuse. | |
n8n Legacy VM n8n-vm Google Compute Engine · asia-southeast1-b | UNVERIFIED V3 failover prestage | Legacy n8n workflow failover candidate | e2-medium + 50GB existing workflow capacity | N8NWORKFLOWMISSION_EXECUTOR | TERMINATED · duplicate-role review | 25% | ✓✓–––––– | DO NOT START AUTOMATICALLY | Canonical n8n stays on KCSG1; start only for justified failover/capacity. |