@hybridlabor-api/aos 4.4.1 → 4.4.2-beta.1

package/skills/bdbsaastraining/scripts/preflight_check.sh

@@ -1,150 +0,0 @@
-#!/usr/bin/env bash
-# BDB SaaS Host Bootcamp — Station 0.5 Preflight Check
-#
-# Usage:  bash preflight_check.sh <lldap_username> [gateway_domain]
-#
-# Prüft die lokale Workstation, BEVOR das Training mit Station 1 startet.
-# Jeder fehlgeschlagene Check gibt einen konkreten Fix-Befehl aus.
-# Exit 0 = alle Pflicht-Checks grün.
-
-set -u
-
-TRAINEE_USER="${1:-}"
-# Domain kommt aus dem 2. Argument oder $PROJECT_DOMAIN — kein Default.
-GATEWAY_DOMAIN="${2:-${PROJECT_DOMAIN:-}}"
-if [ -z "$GATEWAY_DOMAIN" ]; then
-  echo "Fehlt: Fleet-Domain. Aus deiner Onboarding-E-Mail übergeben:" >&2
-  echo "  bash $0 <lldap_user> <deine-fleet-domain>   (oder: export PROJECT_DOMAIN=…)" >&2
-  exit 2
-fi
-GATEWAY_HOST="gateway.${GATEWAY_DOMAIN#gateway.}"
-CA_URL="${STEP_CA_URL:-https://ca.${GATEWAY_DOMAIN#gateway.}}"
-
-# Autoritativer Fingerprint: Aus STEP_CA_FINGERPRINT (ENV) oder dynamisch aus lokalem root_ca.crt
-EXPECTED_FP="${STEP_CA_FINGERPRINT:-}"
-
-GREEN=$'\033[0;32m'; RED=$'\033[0;31m'; YEL=$'\033[0;33m'; NC=$'\033[0m'
-FAIL=0; WARN=0
-
-pass() { printf '  %s✔%s %s\n' "$GREEN" "$NC" "$1"; }
-fail() { printf '  %s✗%s %s\n     %s→ Fix:%s %s\n' "$RED" "$NC" "$1" "$YEL" "$NC" "$2"; FAIL=$((FAIL+1)); }
-warn() { printf '  %s!%s %s\n     %s→%s %s\n' "$YEL" "$NC" "$1" "$YEL" "$NC" "$2"; WARN=$((WARN+1)); }
-
-echo
-echo "── BDB SaaS Host Bootcamp · Preflight ─────────────────────────────"
-echo "   Trainee : ${TRAINEE_USER:-<nicht angegeben>}"
-echo "   Gateway : https://${GATEWAY_HOST}"
-echo "   CA      : ${CA_URL}"
-echo "──────────────────────────────────────────────────────────────────"
-echo
-
-if [ -z "$TRAINEE_USER" ]; then
-  fail "Kein LLDAP-Username übergeben." "bash preflight_check.sh <dein_lldap_user>"
-fi
-
-# 1) step CLI
-if command -v step >/dev/null 2>&1; then
-  pass "step CLI installiert ($(step version 2>/dev/null | head -1))"
-else
-  fail "step CLI fehlt." "macOS: brew install step   |   Debian/Ubuntu: sudo apt-get install -y step-cli"
-fi
-
-# 2) CA bootstrap vorhanden?
-STEP_ROOT="$(step path 2>/dev/null || echo "$HOME/.step")"
-if [ -f "${STEP_ROOT}/certs/root_ca.crt" ]; then
-  pass "Step-CA gebootstrappt (${STEP_ROOT}/certs/root_ca.crt)"
-  # 3) Fingerprint-Prüfung
-  ACTUAL_FP="$(step certificate fingerprint "${STEP_ROOT}/certs/root_ca.crt" 2>/dev/null | tr -d '[:space:]')"
-  if [ -n "$EXPECTED_FP" ]; then
-    if [ "$ACTUAL_FP" = "$EXPECTED_FP" ]; then
-      pass "CA-Fingerprint stimmt mit STEP_CA_FINGERPRINT überein"
-    else
-      fail "CA-Fingerprint weicht ab (lokal: ${ACTUAL_FP:0:16}… / erwartet: ${EXPECTED_FP:0:16}…)." \
-           "step ca bootstrap --ca-url ${CA_URL} --fingerprint ${EXPECTED_FP} --force"
-    fi
-  elif [ -n "$ACTUAL_FP" ]; then
-    pass "Lokale Root-CA verifiziert (Fingerprint: ${ACTUAL_FP:0:16}…)"
-  else
-    warn "Fingerprint konnte nicht berechnet werden." "step certificate fingerprint ${STEP_ROOT}/certs/root_ca.crt"
-  fi
-else
-  fail "Step-CA nicht gebootstrappt." "step ca bootstrap --ca-url ${CA_URL} --fingerprint ${EXPECTED_FP} --force"
-fi
-
-# 4) ~/.ssh/config Fleet-Block
-if [ -f "$HOME/.ssh/config" ] && grep -q "BDB SAAS HOST FLEET RULES" "$HOME/.ssh/config" 2>/dev/null; then
-  pass "~/.ssh/config enthält den BDB Fleet-Block"
-  if [ -n "$TRAINEE_USER" ] && ! grep -qE "^[[:space:]]*User[[:space:]]+${TRAINEE_USER}\b" "$HOME/.ssh/config"; then
-    warn "Fleet-Block nutzt nicht 'User ${TRAINEE_USER}'." "npm run setup:workstation   (setzt User + CertificateFile neu)"
-  fi
-else
-  fail "Kein BDB Fleet-Block in ~/.ssh/config." \
-       "npx @hybridlabor-api/bdb-dev-optimized-agent-skills setup-saas --gateway ${GATEWAY_HOST}   (oder 'npm run setup:workstation' im geklonten Engine-Repo)"
-fi
-
-# 5) SSH-Zertifikat vorhanden & gültig?
-CERT="${STEP_ROOT}/ssh/id_ecdsa-cert.pub"
-if [ -f "$CERT" ]; then
-  if command -v step >/dev/null 2>&1 && step ssh inspect "$CERT" >/dev/null 2>&1; then
-    VALID_TO="$(step ssh inspect "$CERT" 2>/dev/null | awk -F': *' '/Valid:/ {print $2}')"
-    pass "SSH-Zertifikat vorhanden (${VALID_TO:-TTL siehe 'step ssh inspect'})"
-  else
-    warn "SSH-Zertifikat vorhanden, aber nicht lesbar/abgelaufen." "step ssh login ${TRAINEE_USER}"
-  fi
-else
-  warn "Noch kein SSH-Zertifikat — wird in Station 1 erzeugt." "step ssh login ${TRAINEE_USER}   (kommt in Station 1)"
-fi
-
-# 6) FastMCP-Client-Config
-MCP_FOUND=0
-for f in \
-  "$HOME/.cursor/mcp.json" \
-  "$HOME/Library/Application Support/Claude/claude_desktop_config.json" \
-  "$HOME/.config/Claude/claude_desktop_config.json" \
-  "$HOME/.gemini/antigravity-cli/mcp/bdb_remoteos_gateway/config.json" \
-  "$HOME/Library/Application Support/Code/User/globalStorage/rooveterinaryinc.roo-cline/settings/cline_mcp_settings.json"
-do
-  if [ -f "$f" ] && grep -q "gateway.${GATEWAY_DOMAIN#gateway.}" "$f" 2>/dev/null; then
-    pass "FastMCP-Gateway in $(basename "$(dirname "$f")")/$(basename "$f")"
-    MCP_FOUND=1
-  fi
-done
-[ "$MCP_FOUND" -eq 0 ] && warn "Kein Client mit FastMCP-Gateway-Eintrag gefunden." \
-  "npm run setup:workstation   (injiziert das SSE-Gateway in alle erkannten Editoren)"
-
-# 7) Gateway erreichbar
-if command -v curl >/dev/null 2>&1; then
-  CODE="$(curl -sS -o /dev/null -w '%{http_code}' --max-time 8 "https://${GATEWAY_HOST}/health" 2>/dev/null || echo 000)"
-  case "$CODE" in
-    200) pass "Gateway /health erreichbar (200)";;
-    30[0-9]|401|403) pass "Gateway erreichbar (HTTP ${CODE} — Authelia davor, das ist ok)";;
-    000) warn "Gateway https://${GATEWAY_HOST} nicht erreichbar." "Netzwerk/VPN prüfen; Domain korrekt? Argument 2 = gateway_domain";;
-    *)   warn "Gateway antwortet mit HTTP ${CODE}." "Später in Station 4 erneut prüfen";;
-  esac
-else
-  warn "curl nicht installiert — Gateway-Check übersprungen." "brew install curl / apt-get install curl"
-fi
-
-# 8) Machine Identity (OIDC Credential im OS Keychain)
-KEYCHAIN_FOUND=0
-if [[ "$OSTYPE" == "darwin"* ]] && command -v security >/dev/null 2>&1; then
-  if security find-generic-password -s "bdb-saas-host-machine-key" >/dev/null 2>&1; then
-    pass "OIDC Machine Key im macOS Keychain vorhanden (bdb-saas-host-machine-key)"
-    KEYCHAIN_FOUND=1
-  fi
-fi
-if [ "$KEYCHAIN_FOUND" -eq 0 ]; then
-  warn "Kein Machine-Key im Keychain — für autonome Agenten (Station 1b) erforderlich." \
-       "npm run setup:workstation   (generiert RSA-Keypair und registriert Machine Identity)"
-fi
-
-echo
-echo "──────────────────────────────────────────────────────────────────"
-if [ "$FAIL" -eq 0 ]; then
-  printf ' %sPreflight bestanden%s (%d Hinweise). Weiter mit Station 1.\n' "$GREEN" "$NC" "$WARN"
-  exit 0
-else
-  printf ' %s%d Pflicht-Check(s) fehlgeschlagen%s, %d Hinweise.\n' "$RED" "$FAIL" "$NC" "$WARN"
-  printf ' Fixes ausführen, dann erneut: bash %s %s\n' "$0" "$TRAINEE_USER"
-  exit 1
-fi

package/skills/bdbsaastraining/templates/certificate_template.html

@@ -1,508 +0,0 @@
-<!DOCTYPE html>
-<html lang="de">
-<head>
-  <meta charset="UTF-8">
-  <title>BDB SaaS Host Administrator Certificate - {{ candidate_name }}</title>
-  <style>
-    @page {
-      size: A4 landscape;
-      margin: 0;
-    }
-    * {
-      box-sizing: border-box;
-      margin: 0;
-      padding: 0;
-    }
-    body {
-      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
-      background: #04060a;
-      color: #f8fafc;
-      width: 297mm;
-      height: 210mm;
-      padding: 7mm 9mm;
-      display: flex;
-      justify-content: center;
-      align-items: center;
-      -webkit-print-color-adjust: exact;
-    }
-    .cert-container {
-      width: 100%;
-      height: 100%;
-      background: radial-gradient(circle at 50% 10%, #0f1324 0%, #080b16 50%, #030408 100%);
-      border: 2px solid #1c243c;
-      border-radius: 18px;
-      padding: 8mm 12mm 7mm 12mm;
-      position: relative;
-      display: flex;
-      flex-direction: column;
-      justify-content: space-between;
-      box-shadow: inset 0 0 120px rgba(56, 189, 248, 0.04);
-      overflow: hidden;
-    }
-
-    /* Fixed Perfectly Centered Watermark */
-    .watermark {
-      position: absolute;
-      top: 54%;
-      left: 50%;
-      transform: translate(-50%, -50%);
-      width: 460px;
-      height: 460px;
-      opacity: 0.038;
-      pointer-events: none;
-      z-index: 1;
-    }
-
-    /* Guilloche Corner Accents */
-    .corner-decor {
-      position: absolute;
-      width: 32px;
-      height: 32px;
-      border: 2px solid #38bdf8;
-      opacity: 0.75;
-      z-index: 3;
-    }
-    .top-left { top: 8px; left: 8px; border-right: none; border-bottom: none; }
-    .top-right { top: 8px; right: 8px; border-left: none; border-bottom: none; }
-    .bottom-left { bottom: 8px; left: 8px; border-right: none; border-top: none; }
-    .bottom-right { bottom: 8px; right: 8px; border-left: none; border-top: none; }
-
-    .content-layer {
-      position: relative;
-      z-index: 2;
-      display: flex;
-      flex-direction: column;
-      justify-content: space-between;
-      height: 100%;
-    }
-
-    /* ==========================================================================
-       ENTERPRISE HEADER CARD (bdb-enterprise-header layout)
-       ========================================================================== */
-    .enterprise-header-card {
-      background: linear-gradient(135deg, #090514 0%, #170a28 50%, #07030e 100%);
-      border: 1px solid rgba(155, 48, 196, 0.45);
-      border-radius: 14px;
-      padding: 12px 20px;
-      position: relative;
-      box-shadow: 0 6px 24px rgba(0, 0, 0, 0.45);
-    }
-    .header-grid-lines {
-      position: absolute;
-      inset: 0;
-      border-radius: 14px;
-      background-image: 
-        linear-gradient(to right, rgba(255, 255, 255, 0.03) 1px, transparent 1px),
-        linear-gradient(to bottom, rgba(255, 255, 255, 0.03) 1px, transparent 1px);
-      background-size: 32px 32px;
-      pointer-events: none;
-    }
-    .header-main-row {
-      position: relative;
-      z-index: 2;
-      display: flex;
-      justify-content: space-between;
-      align-items: center;
-    }
-    .header-left-group {
-      display: flex;
-      align-items: center;
-      gap: 16px;
-    }
-    .bdb-coin-box {
-      width: 56px;
-      height: 56px;
-      filter: drop-shadow(0 0 12px rgba(155, 48, 196, 0.6));
-      flex-shrink: 0;
-    }
-    .header-title-box {
-      display: flex;
-      flex-direction: column;
-    }
-    .header-main-title {
-      font-size: 26px;
-      font-weight: 900;
-      letter-spacing: -0.5px;
-      color: #ffffff;
-      line-height: 1.1;
-      display: flex;
-      align-items: baseline;
-      gap: 4px;
-    }
-    .header-main-title span.purple {
-      color: #c084fc;
-      font-size: 19px;
-      font-weight: 800;
-    }
-    .header-tagline {
-      font-size: 11px;
-      font-weight: 700;
-      letter-spacing: 2px;
-      color: #ffffff;
-      margin-top: 3px;
-    }
-    .header-tagline span.gray {
-      color: #94a3b8;
-      font-weight: 500;
-    }
-
-    /* Live Status Badge */
-    .header-right-group {
-      display: flex;
-      align-items: center;
-    }
-    .live-status-pill {
-      display: flex;
-      align-items: center;
-      gap: 8px;
-      padding: 6px 16px;
-      background: rgba(24, 5, 36, 0.85);
-      border: 1.2px solid rgba(255, 255, 255, 0.6);
-      border-radius: 999px;
-      box-shadow: 0 0 12px rgba(16, 185, 129, 0.15);
-    }
-    .live-dot {
-      width: 8px;
-      height: 8px;
-      background-color: #10b981;
-      border-radius: 50%;
-      box-shadow: 0 0 8px #10b981;
-    }
-    .live-text {
-      font-size: 11px;
-      font-weight: 800;
-      letter-spacing: 1.5px;
-      color: #ffffff;
-      text-transform: uppercase;
-    }
-
-    /* Tech Badges Row */
-    .header-badges-row {
-      position: relative;
-      z-index: 2;
-      display: flex;
-      gap: 10px;
-      margin-top: 10px;
-    }
-    .tech-pill {
-      background: #140d22;
-      border: 1px solid #51116F;
-      border-radius: 5px;
-      padding: 3px 10px;
-      font-family: ui-monospace, SFMono-Regular, Consolas, monospace;
-      font-size: 10px;
-      font-weight: 700;
-      letter-spacing: 0.6px;
-      color: #e2e8f0;
-    }
-    .tech-pill.highlight {
-      color: #c084fc;
-      border-color: #9b30c4;
-      background: rgba(155, 48, 196, 0.15);
-    }
-
-    /* ==========================================================================
-       MIDDLE: CERTIFICATE AWARD BODY
-       ========================================================================== */
-    .award-section {
-      text-align: center;
-      margin: 12px 0 8px 0;
-    }
-    .award-header-badge {
-      display: inline-block;
-      padding: 4px 16px;
-      background: rgba(56, 189, 248, 0.1);
-      border: 1px solid rgba(56, 189, 248, 0.35);
-      border-radius: 9999px;
-      font-size: 10px;
-      font-weight: 700;
-      letter-spacing: 2px;
-      color: #38bdf8;
-      text-transform: uppercase;
-      margin-bottom: 6px;
-    }
-    h1.cert-title {
-      font-size: 28px;
-      font-weight: 900;
-      letter-spacing: 2.5px;
-      background: linear-gradient(135deg, #ffffff 0%, #cbd5e1 100%);
-      -webkit-background-clip: text;
-      -webkit-text-fill-color: transparent;
-      margin-bottom: 4px;
-      text-transform: uppercase;
-    }
-    .track-pill-badge {
-      display: inline-block;
-      margin-top: 2px;
-      padding: 4px 16px;
-      background: rgba(56, 189, 248, 0.12);
-      border: 1px solid rgba(56, 189, 248, 0.4);
-      border-radius: 6px;
-      font-size: 12.5px;
-      font-weight: 700;
-      color: #38bdf8;
-      letter-spacing: 0.5px;
-    }
-
-    .certifies-line {
-      font-size: 11.5px;
-      color: #64748b;
-      margin-top: 10px;
-      margin-bottom: 4px;
-      text-transform: uppercase;
-      letter-spacing: 1.5px;
-    }
-    .candidate-name {
-      font-size: 36px;
-      font-weight: 900;
-      letter-spacing: 1px;
-      color: #ffffff;
-      text-shadow: 0 0 24px rgba(56, 189, 248, 0.45);
-      margin-bottom: 6px;
-    }
-    .statement-text {
-      font-size: 12px;
-      color: #cbd5e1;
-      max-width: 800px;
-      margin: 0 auto;
-      line-height: 1.5;
-    }
-
-    /* Skills Grid (3x2) */
-    .skills-grid {
-      display: grid;
-      grid-template-columns: repeat(3, 1fr);
-      gap: 8px;
-      background: rgba(13, 18, 32, 0.7);
-      border: 1px solid rgba(40, 52, 85, 0.7);
-      border-radius: 10px;
-      padding: 10px 18px;
-      margin: 10px 0 8px 0;
-    }
-    .skill-item {
-      font-size: 11px;
-      color: #e2e8f0;
-      display: flex;
-      align-items: center;
-      gap: 7px;
-    }
-    .check {
-      color: #10b981;
-      font-weight: bold;
-      font-size: 13px;
-    }
-
-    /* ==========================================================================
-       FOOTER SECTION: METADATA, GOLD SEAL & SIGNATURE
-       ========================================================================== */
-    .footer {
-      display: flex;
-      justify-content: space-between;
-      align-items: flex-end;
-      border-top: 1px solid rgba(40, 52, 85, 0.7);
-      padding-top: 10px;
-      margin-top: 4px;
-    }
-    .meta-col {
-      font-size: 10.5px;
-      color: #64748b;
-      line-height: 1.55;
-    }
-    .meta-col strong {
-      color: #94a3b8;
-    }
-
-    /* Authentic Gold Verified Seal Stamp (Correctly Transformed) */
-    .seal-col {
-      display: flex;
-      flex-direction: column;
-      align-items: center;
-      gap: 3px;
-    }
-    .seal-circle-outer {
-      width: 52px;
-      height: 52px;
-      border-radius: 50%;
-      border: 2px solid #eab308;
-      background: radial-gradient(circle, #3d2305 0%, #150d03 100%);
-      display: flex;
-      justify-content: center;
-      align-items: center;
-      box-shadow: 0 0 16px rgba(234, 179, 8, 0.4);
-    }
-    .seal-label {
-      font-size: 8.5px;
-      font-weight: 800;
-      letter-spacing: 1.2px;
-      color: #eab308;
-      text-transform: uppercase;
-    }
-
-    .sig-col {
-      text-align: right;
-    }
-    .sig-line {
-      font-size: 13px;
-      font-weight: 700;
-      color: #f1f5f9;
-      border-top: 1px solid #475569;
-      padding-top: 4px;
-      display: inline-block;
-      min-width: 190px;
-      text-align: center;
-    }
-    .sig-title {
-      font-size: 9.5px;
-      color: #64748b;
-      margin-top: 2px;
-      text-align: center;
-    }
-  </style>
-</head>
-<body>
-  <div class="cert-container">
-    <!-- Guilloche Corners -->
-    <div class="corner-decor top-left"></div>
-    <div class="corner-decor top-right"></div>
-    <div class="corner-decor bottom-left"></div>
-    <div class="corner-decor bottom-right"></div>
-
-    <!-- Complete Centered Vector Watermark (Mathematically Centered at 256, 256) -->
-    <div class="watermark">
-      <svg viewBox="0 0 512 512" width="100%" height="100%">
-        <circle cx="256" cy="256" r="220" fill="none" stroke="#38bdf8" stroke-width="4"/>
-        <circle cx="256" cy="256" r="200" fill="none" stroke="#38bdf8" stroke-width="2"/>
-        <g transform="translate(70, 68)" fill="#38bdf8">
-          <path d="M181.63.05c101.39-2.47,184.56,80.09,190.14,179.93,5.53,99.03-66.16,185.42-165.11,195.46-87.39,8.86-171.1-45.56-197.67-128.96C-28.74,128.03,56.78,3.1,181.63.05h0ZM177.5,21.3C69.09,25.31-7.16,129.62,21.76,234.52c18.72,67.88,81.56,116.7,151.53,121.32,106.21,7.03,195.6-81.63,179.68-189.06-12.54-84.65-89.81-148.66-175.47-145.49h0Z"/>
-          <path d="M147.69,120.05c12.04.36,24.64-.72,36.62-.07,24.29,1.32,41.37,20.13,42.91,43.99-.69,16.35.57,33.42-.28,49.69-1.31,25.42-18.55,43.75-44.02,45.64-9.59.72-20.14.69-29.78.84-4.97.08-9.9.68-10.37-5.66s.43-9.41.34-14.03c12.65-11.84,14.75-31.17,4.75-45.41-.63-.9-2.26-2.34-2.62-3.17s-.46-12.58-.26-14.37,1.1-3.52,1.46-5.16c1.21-5.42,1.06-11.26-.39-16.62-.41-1.54-1.48-3.56-1.63-4.99-.47-4.28-.14-9.67-.26-14.08-.11-3.56-.84-8.43-.57-11.86s1.32-4.35,4.08-4.75h0ZM162.03,135.5c-4.32.73-3.34,6.65-3.26,10.01.17,6.21.91,12.51,1.13,18.73.83,23.13-1.03,45.49-1.41,68.42-.07,3.93-1.27,10.87,4.01,11.46,10.36-.51,21.39,1.89,31.38-1.45,13.74-4.59,20.43-17.79,19.81-31.81-1.77-14.46-1.19-29.09-1.94-43.58-.52-10.12-3.97-20.33-12.44-26.46-10.8-7.82-24.82-4.88-37.29-5.34h0Z"/>
-          <path d="M232.66,132.46c9.53.36,19.74-.72,29.19-.08,22.64,1.52,33.92,28.58,21.93,47.05-1.49,2.3-4.32,4.47-3.85,7.42.47,2.95,5.64,6.21,7.42,8.3,11.88,13.96,8.41,35.69-6.91,45.49-7.85,5.02-14.69,4.43-23.56,4.86-7.67.37-16.24,1.05-23.91.66-1.66-.08-2.98-.73-3.68-2.32s-.52-7.28-.43-9.26c.36-6.63,3.52-13.04,3.89-20.39.58-11.38-.1-23.12-.3-34.49-.1-5.68.32-11.44-.3-17.08-.41-3.82-1.64-7.52-1.89-11.35-.25-3.85-.18-7.99-.26-11.88-.07-2.84-1.26-6.03,2.68-6.95h-.01ZM243.68,144.59c-3.41.77-2.55,6.7-2.66,9.2-.28,6.08-.58,12.36-.29,18.47.1,2.06.36,6.36.9,8.21.54,1.85.84,1.79,1.66,2.19,1.66.83,8-.68,10.26-.88,4.22-.39,8.12.03,12.28-1.24,16.76-5.12,16.53-26.53,1.01-33.02-15.52-6.5-13.5-2.7-18.82-2.98-5.31-.28-3.37-.17-4.36.06h.03ZM243.68,194.52c-3.49.79-2.58,8.66-2.68,11.39-.26,7.05-1.06,17.41.07,24.21,1.13,6.8,2.63,3.38,5.32,3.26,3.96-.19,8.36-1.32,12.4-1.67,5.85-.5,10.68.22,16.24-2.25,13.6-6.04,12.62-25.27-.46-31.46-5.63-2.66-9.89-1.97-15.78-2.43-3.57-.28-7.2-.92-10.76-1.1-1.12-.06-3.35-.17-4.36.06h0Z"/>
-          <path d="M90.59,133.03c8.84-.44,25.24-1.08,33.23,1.92,18.07,6.77,23.99,29.96,13.56,45.7-1.6,2.41-4.52,4.44-3.28,7.75.69,1.85,5.41,5.42,7.03,7.31,11.86,13.82,8.77,35.23-6.25,45.33-15.02,10.1-23.31,5.27-34.44,5.56-4.12.11-10.36.88-14.32.28-2.22-.34-3.45-2.79-3.48-4.83-.11-7.84.77-15.89,1.1-23.71.99-23.09,1.31-45.33.57-68.43-.14-4.15-1.05-9.79-.57-13.79.43-3.52,4.1-2.95,6.84-3.09h0ZM98.3,145.15c-1.71.29-2.98,1.7-3.21,3.41-.15,1.19-.23,3.13-.3,4.39-.39,8.01-.9,19.53.58,27.27.23,1.24.57,2.55,1.82,3.15,1.81.84,7.03-.55,9.32-.76,3.3-.3,6.62-.1,9.89-.59,21.2-3.21,21.02-29.7,1.28-34.86-4.36-1.14-13.16-1.92-17.79-2.07-.55-.01-1.03-.03-1.59.07h0ZM98.03,195.09c-4.25.88-2.46,6.76-3.24,9.72-.06,7.92-.55,15.86,0,23.75.22,3.21.77,5.75,4.57,5.67,3.82-.08,8.46-1.32,12.41-1.67,5.55-.48,11.21.12,16.48-2,14.62-5.88,13.53-26.13-.52-32.17-5.13-2.21-8.25-1.59-13.48-1.97-4.69-.34-9.7-1.23-14.35-1.38-.62-.01-1.26-.07-1.86.06h-.01Z"/>
-        </g>
-      </svg>
-    </div>
-
-    <div class="content-layer">
-      <!-- 1. BDB ENTERPRISE SAAS HOST HEADER CARD -->
-      <div class="enterprise-header-card">
-        <div class="header-grid-lines"></div>
-        <div class="header-main-row">
-          <div class="header-left-group">
-            <!-- Authentic BDB 3D Metallic Seal Coin -->
-            <div class="bdb-coin-box">
-              <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" width="100%" height="100%">
-                <defs>
-                  <linearGradient id="bdbPlateLight" x1="0%" y1="0%" x2="100%" y2="100%">
-                    <stop offset="0%" stop-color="#FFFFFF"/>
-                    <stop offset="60%" stop-color="#FFFFFF"/>
-                    <stop offset="100%" stop-color="#E7E7EA"/>
-                  </linearGradient>
-                  <linearGradient id="bdbPlateDark" x1="0%" y1="0%" x2="0%" y2="100%">
-                    <stop offset="0%" stop-color="#1C1C1F"/>
-                    <stop offset="100%" stop-color="#050505"/>
-                  </linearGradient>
-                </defs>
-                <circle cx="256" cy="256" r="195" fill="url(#bdbPlateDark)" stroke="#FFFFFF" stroke-width="2" stroke-opacity="0.6"/>
-                <circle cx="256" cy="256" r="175" fill="#0a0a0a"/>
-                <g transform="translate(70, 68)">
-                  <path fill="url(#bdbPlateLight)" d="M181.63.05c101.39-2.47,184.56,80.09,190.14,179.93,5.53,99.03-66.16,185.42-165.11,195.46-87.39,8.86-171.1-45.56-197.67-128.96C-28.74,128.03,56.78,3.1,181.63.05h0ZM177.5,21.3C69.09,25.31-7.16,129.62,21.76,234.52c18.72,67.88,81.56,116.7,151.53,121.32,106.21,7.03,195.6-81.63,179.68-189.06-12.54-84.65-89.81-148.66-175.47-145.49h0Z"/>
-                  <g fill="#FFFFFF">
-                    <path d="M147.69,120.05c12.04.36,24.64-.72,36.62-.07,24.29,1.32,41.37,20.13,42.91,43.99-.69,16.35.57,33.42-.28,49.69-1.31,25.42-18.55,43.75-44.02,45.64-9.59.72-20.14.69-29.78.84-4.97.08-9.9.68-10.37-5.66s.43-9.41.34-14.03c12.65-11.84,14.75-31.17,4.75-45.41-.63-.9-2.26-2.34-2.62-3.17s-.46-12.58-.26-14.37,1.1-3.52,1.46-5.16c1.21-5.42,1.06-11.26-.39-16.62-.41-1.54-1.48-3.56-1.63-4.99-.47-4.28-.14-9.67-.26-14.08-.11-3.56-.84-8.43-.57-11.86s1.32-4.35,4.08-4.75h0ZM162.03,135.5c-4.32.73-3.34,6.65-3.26,10.01.17,6.21.91,12.51,1.13,18.73.83,23.13-1.03,45.49-1.41,68.42-.07,3.93-1.27,10.87,4.01,11.46,10.36-.51,21.39,1.89,31.38-1.45,13.74-4.59,20.43-17.79,19.81-31.81-1.77-14.46-1.19-29.09-1.94-43.58-.52-10.12-3.97-20.33-12.44-26.46-10.8-7.82-24.82-4.88-37.29-5.34h0Z"/>
-                    <path d="M232.66,132.46c9.53.36,19.74-.72,29.19-.08,22.64,1.52,33.92,28.58,21.93,47.05-1.49,2.3-4.32,4.47-3.85,7.42.47,2.95,5.64,6.21,7.42,8.3,11.88,13.96,8.41,35.69-6.91,45.49-7.85,5.02-14.69,4.43-23.56,4.86-7.67.37-16.24,1.05-23.91.66-1.66-.08-2.98-.73-3.68-2.32s-.52-7.28-.43-9.26c.36-6.63,3.52-13.04,3.89-20.39.58-11.38-.1-23.12-.3-34.49-.1-5.68.32-11.44-.3-17.08-.41-3.82-1.64-7.52-1.89-11.35-.25-3.85-.18-7.99-.26-11.88-.07-2.84-1.26-6.03,2.68-6.95h-.01ZM243.68,144.59c-3.41.77-2.55,6.7-2.66,9.2-.28,6.08-.58,12.36-.29,18.47.1,2.06.36,6.36.9,8.21.54,1.85.84,1.79,1.66,2.19,1.66.83,8-.68,10.26-.88,4.22-.39,8.12.03,12.28-1.24,16.76-5.12,16.53-26.53,1.01-33.02-15.52-6.5-13.5-2.7-18.82-2.98-5.31-.28-3.37-.17-4.36.06h.03ZM243.68,194.52c-3.49.79-2.58,8.66-2.68,11.39-.26,7.05-1.06,17.41.07,24.21,1.13,6.8,2.63,3.38,5.32,3.26,3.96-.19,8.36-1.32,12.4-1.67,5.85-.5,10.68.22,16.24-2.25,13.6-6.04,12.62-25.27-.46-31.46-5.63-2.66-9.89-1.97-15.78-2.43-3.57-.28-7.2-.92-10.76-1.1-1.12-.06-3.35-.17-4.36.06h0Z"/>
-                    <path d="M90.59,133.03c8.84-.44,25.24-1.08,33.23,1.92,18.07,6.77,23.99,29.96,13.56,45.7-1.6,2.41-4.52,4.44-3.28,7.75.69,1.85,5.41,5.42,7.03,7.31,11.86,13.82,8.77,35.23-6.25,45.33-15.02,10.1-23.31,5.27-34.44,5.56-4.12.11-10.36.88-14.32.28-2.22-.34-3.45-2.79-3.48-4.83-.11-7.84.77-15.89,1.1-23.71.99-23.09,1.31-45.33.57-68.43-.14-4.15-1.05-9.79-.57-13.79.43-3.52,4.1-2.95,6.84-3.09h0ZM98.3,145.15c-1.71.29-2.98,1.7-3.21,3.41-.15,1.19-.23,3.13-.3,4.39-.39,8.01-.9,19.53.58,27.27.23,1.24.57,2.55,1.82,3.15,1.81.84,7.03-.55,9.32-.76,3.3-.3,6.62-.1,9.89-.59,21.2-3.21,21.02-29.7,1.28-34.86-4.36-1.14-13.16-1.92-17.79-2.07-.55-.01-1.03-.03-1.59.07h0ZM98.03,195.09c-4.25.88-2.46,6.76-3.24,9.72-.06,7.92-.55,15.86,0,23.75.22,3.21.77,5.75,4.57,5.67,3.82-.08,8.46-1.32,12.41-1.67,5.55-.48,11.21.12,16.48-2,14.62-5.88,13.53-26.13-.52-32.17-5.13-2.21-8.25-1.59-13.48-1.97-4.69-.34-9.7-1.23-14.35-1.38-.62-.01-1.26-.07-1.86.06h-.01Z"/>
-                  </g>
-                </g>
-              </svg>
-            </div>
-
-            <div class="header-title-box">
-              <div class="header-main-title">
-                BDB SAAS HOST<span class="purple"> . OS</span>
-              </div>
-              <div class="header-tagline">
-                BRANCH • DEVELOP • BUMP <span class="gray">| HYBRIDLABOR GLOBAL LLC</span>
-              </div>
-            </div>
-          </div>
-
-          <div class="header-right-group">
-            <div class="live-status-pill">
-              <div class="live-dot"></div>
-              <div class="live-text">FLEET CERTIFIED</div>
-            </div>
-          </div>
-        </div>
-
-        <div class="header-badges-row">
-          <div class="tech-pill highlight">INCUS HYPERVISOR</div>
-          <div class="tech-pill">STEP-CA 2FA</div>
-          <div class="tech-pill highlight">FASTMCP GATEWAY</div>
-          <div class="tech-pill">4-EYES GUARD</div>
-          <div class="tech-pill">memB VAULT</div>
-        </div>
-      </div>
-
-      <!-- 2. CERTIFICATE AWARD BODY -->
-      <div class="award-section">
-        <div class="award-header-badge">OFFICIAL TECHNICAL ACCREDITATION</div>
-        <h1 class="cert-title">CERTIFICATE OF EXCELLENCE</h1>
-        <div class="track-pill-badge">{{ track_line }}</div>
-
-        <div class="certifies-line">This is to officially certify that</div>
-        <div class="candidate-name">{{ candidate_name }}</div>
-        <div class="statement-text">
-          has successfully completed the intensive hands-on SysAdmin bootcamp and demonstrated verified technical competence in container virtualization, zero-trust security, and autonomous AI-agent operations across the BDB Multi-Cloud Fleet.
-        </div>
-      </div>
-
-      <!-- 3. VERIFIED TECHNICAL COMPETENCIES (3x2 Grid) -->
-      <div class="skills-grid">
-        <div class="skill-item"><span class="check">&#10003;</span> Zero-Trust Step-CA 2FA SSH</div>
-        <div class="skill-item"><span class="check">&#10003;</span> Incus Custom Profile Engineering</div>
-        <div class="skill-item"><span class="check">&#10003;</span> Autonomous AI-Agent Sandboxing</div>
-        <div class="skill-item"><span class="check">&#10003;</span> FastMCP Remote Gateway Operations</div>
-        <div class="skill-item"><span class="check">&#10003;</span> 4-Eyes HMAC Authorization</div>
-        <div class="skill-item"><span class="check">&#10003;</span> Caddy 2FA &amp; Cloudflare Governance</div>
-      </div>
-
-      <!-- 4. FOOTER: METADATA, GOLD SEAL & SIGNATURE -->
-      <div class="footer">
-        <div class="meta-col">
-          <div><strong>Issue Date:</strong> {{ issue_date }}</div>
-          <div><strong>Final Exam Score:</strong> {{ score }}/10 ({{ percentage }}%)</div>
-          <div><strong>Certificate ID:</strong> {{ cert_id }}</div>
-        </div>
-
-        <!-- Authentic Gold Seal Stamp (Correctly Transformed & Scaled) -->
-        <div class="seal-col">
-          <div class="seal-circle-outer">
-            <svg viewBox="0 0 512 512" width="34" height="34">
-              <defs>
-                <linearGradient id="sealGold" x1="0%" y1="0%" x2="100%" y2="100%">
-                  <stop offset="0%" stop-color="#FEF08A"/>
-                  <stop offset="50%" stop-color="#EAB308"/>
-                  <stop offset="100%" stop-color="#CA8A04"/>
-                </linearGradient>
-              </defs>
-              <circle cx="256" cy="256" r="230" fill="none" stroke="url(#sealGold)" stroke-width="12"/>
-              <circle cx="256" cy="256" r="200" fill="none" stroke="url(#sealGold)" stroke-width="4" stroke-dasharray="8 6"/>
-              <g transform="translate(70, 68)" fill="url(#sealGold)">
-                <path d="M181.63.05c101.39-2.47,184.56,80.09,190.14,179.93,5.53,99.03-66.16,185.42-165.11,195.46-87.39,8.86-171.1-45.56-197.67-128.96C-28.74,128.03,56.78,3.1,181.63.05h0ZM177.5,21.3C69.09,25.31-7.16,129.62,21.76,234.52c18.72,67.88,81.56,116.7,151.53,121.32,106.21,7.03,195.6-81.63,179.68-189.06-12.54-84.65-89.81-148.66-175.47-145.49h0Z"/>
-                <path d="M147.69,120.05c12.04.36,24.64-.72,36.62-.07,24.29,1.32,41.37,20.13,42.91,43.99-.69,16.35.57,33.42-.28,49.69-1.31,25.42-18.55,43.75-44.02,45.64-9.59.72-20.14.69-29.78.84-4.97.08-9.9.68-10.37-5.66s.43-9.41.34-14.03c12.65-11.84,14.75-31.17,4.75-45.41-.63-.9-2.26-2.34-2.62-3.17s-.46-12.58-.26-14.37,1.1-3.52,1.46-5.16c1.21-5.42,1.06-11.26-.39-16.62-.41-1.54-1.48-3.56-1.63-4.99-.47-4.28-.14-9.67-.26-14.08-.11-3.56-.84-8.43-.57-11.86s1.32-4.35,4.08-4.75h0ZM162.03,135.5c-4.32.73-3.34,6.65-3.26,10.01.17,6.21.91,12.51,1.13,18.73.83,23.13-1.03,45.49-1.41,68.42-.07,3.93-1.27,10.87,4.01,11.46,10.36-.51,21.39,1.89,31.38-1.45,13.74-4.59,20.43-17.79,19.81-31.81-1.77-14.46-1.19-29.09-1.94-43.58-.52-10.12-3.97-20.33-12.44-26.46-10.8-7.82-24.82-4.88-37.29-5.34h0Z"/>
-                <path d="M232.66,132.46c9.53.36,19.74-.72,29.19-.08,22.64,1.52,33.92,28.58,21.93,47.05-1.49,2.3-4.32,4.47-3.85,7.42.47,2.95,5.64,6.21,7.42,8.3,11.88,13.96,8.41,35.69-6.91,45.49-7.85,5.02-14.69,4.43-23.56,4.86-7.67.37-16.24,1.05-23.91.66-1.66-.08-2.98-.73-3.68-2.32s-.52-7.28-.43-9.26c.36-6.63,3.52-13.04,3.89-20.39.58-11.38-.1-23.12-.3-34.49-.1-5.68.32-11.44-.3-17.08-.41-3.82-1.64-7.52-1.89-11.35-.25-3.85-.18-7.99-.26-11.88-.07-2.84-1.26-6.03,2.68-6.95h-.01ZM243.68,144.59c-3.41.77-2.55,6.7-2.66,9.2-.28,6.08-.58,12.36-.29,18.47.1,2.06.36,6.36.9,8.21.54,1.85.84,1.79,1.66,2.19,1.66.83,8-.68,10.26-.88,4.22-.39,8.12.03,12.28-1.24,16.76-5.12,16.53-26.53,1.01-33.02-15.52-6.5-13.5-2.7-18.82-2.98-5.31-.28-3.37-.17-4.36.06h.03ZM243.68,194.52c-3.49.79-2.58,8.66-2.68,11.39-.26,7.05-1.06,17.41.07,24.21,1.13,6.8,2.63,3.38,5.32,3.26,3.96-.19,8.36-1.32,12.4-1.67,5.85-.5,10.68.22,16.24-2.25,13.6-6.04,12.62-25.27-.46-31.46-5.63-2.66-9.89-1.97-15.78-2.43-3.57-.28-7.2-.92-10.76-1.1-1.12-.06-3.35-.17-4.36.06h0Z"/>
-                <path d="M90.59,133.03c8.84-.44,25.24-1.08,33.23,1.92,18.07,6.77,23.99,29.96,13.56,45.7-1.6,2.41-4.52,4.44-3.28,7.75.69,1.85,5.41,5.42,7.03,7.31,11.86,13.82,8.77,35.23-6.25,45.33-15.02,10.1-23.31,5.27-34.44,5.56-4.12.11-10.36.88-14.32.28-2.22-.34-3.45-2.79-3.48-4.83-.11-7.84.77-15.89,1.1-23.71.99-23.09,1.31-45.33.57-68.43-.14-4.15-1.05-9.79-.57-13.79.43-3.52,4.1-2.95,6.84-3.09h0ZM98.3,145.15c-1.71.29-2.98,1.7-3.21,3.41-.15,1.19-.23,3.13-.3,4.39-.39,8.01-.9,19.53.58,27.27.23,1.24.57,2.55,1.82,3.15,1.81.84,7.03-.55,9.32-.76,3.3-.3,6.62-.1,9.89-.59,21.2-3.21,21.02-29.7,1.28-34.86-4.36-1.14-13.16-1.92-17.79-2.07-.55-.01-1.03-.03-1.59.07h0ZM98.03,195.09c-4.25.88-2.46,6.76-3.24,9.72-.06,7.92-.55,15.86,0,23.75.22,3.21.77,5.75,4.57,5.67,3.82-.08,8.46-1.32,12.41-1.67,5.55-.48,11.21.12,16.48-2,14.62-5.88,13.53-26.13-.52-32.17-5.13-2.21-8.25-1.59-13.48-1.97-4.69-.34-9.7-1.23-14.35-1.38-.62-.01-1.26-.07-1.86.06h-.01Z"/>
-              </g>
-            </svg>
-          </div>
-          <div class="seal-label">OFFICIAL SEAL</div>
-        </div>
-
-        <!-- Signature -->
-        <div class="sig-col">
-          <div class="sig-line">Tim Rennings</div>
-          <div class="sig-title">Lead Architect &bull; Hybridlabor Global LLC</div>
-        </div>
-      </div>
-    </div>
-  </div>
-</body>
-</html>