housekeeping 2026-08-05: organize PARA, clean inbox, archive travel, restore paper-apps

- Inbox -> archives/inbox_processed: ari_followup (Sardius), remarkable_inbox, tic_tac_toe_state
- Inbox images -> resources/kids-os (KidsOS UI 2026-07-28)
- Archives/travel/2026: Aeromexico HCYDNU confirmation + Hertz BOS L670EDC05D8
- Exports/calendars: all_flights, chiapas TGZ, maine BOS ICS
- Areas: chiapas_trip_2026-09 (HCYDNU booked), trump_accounts_and_emi_board_2026 (Trump accounts + EMI FL board), operations audits (hermes migration + Apple Mail local research)
- Projects new (enriched stubs from MEMORY.md): xiao_epaper 400x300 (5-pass grayscale), mac_privacy_migrations (Xcode signing), remarkable_pro workflow (132 + watchdog + art), tactility_humation_avatars (320x240 pre-render), voice_dev_infra (network map .102/.110/.150)
- Paper-apps: restored detailed README (181 lines porting guide) + enriched paper_apps_golf_galaxy_zero project with full mechanics cross-ref
- Maine wedding: Hertz rental 63 L670EDC05D8 + tolls (PlatePass vs SunPass PRO) — intentional addition kept
- 220 Emerald: removed duplicate consolidated junk appended at end (142 lines clean)
- Removed runtime logs: chrome.err (288 lines), chrome.log tracked -> now ignored per .gitignore
- Clean empty inbox

projects/mac_privacy_migrations_2026.md

@@ -0,0 +1,37 @@
+---
+date: 2026-08-05
+type: area
+tags: [macos, privacy, migration, signing]
+---
+
+# Mac Privacy Migrations
+
+## Context
+Mac mini is sole private/browser host per AGENTS.md. All browser automation, private state, and signing runs only on Mac mini M4 (.102). iMac is kids-only.
+
+## Rules (user approved)
+- Batch work for one GUI signing wave
+- Make redacted Gitea backup first (adolforeyna/*)
+- Never commit credentials
+- Xcode Automatic Signing, not ad-hoc codesign — avoid fragile codesign calls
+- No browser automation on iMac — Mac mini only
+
+## Migration Checklist
+- [ ] Gitea backup (redacted) before privileged migrations
+- [ ] Batch signing items (one wave)
+- [ ] Xcode managed signing target
+- [ ] Verify Mac mini private host: GW :8642, MCP, browser CDP :9222, visible profile Hermes
+
+## Related
+- Projects: reyna_cli_browser_control.md, paseo_centralized_agents_2026.md
+- Hermes migration audit: areas/operations/hermes_migration_macmini_2026-08-02.md
+- Apple Mail local: areas/operations/apple_mail_local_read_research_2026-08-03.md
+- Network inventory: areas/network/devices_inventory.md
+
+## Infra Map Reminder
+- .150 iPhone MCP: play_audio_base64, Voicebox, mic, camera
+- .102 Mac mini M4: GW API :8642, MCP server, image gen, calendar/contacts
+- .110 FamReynaServer: Pi-hole, Instatic :3002/:3005, Immich, Docker host
+- .126/.128 aeropi5: legacy Hermes gateway (now Mac mini)
+
+[[Areas]] | [[Index]]