Glossary

Definitions for the people, systems, programs, and jargon that show up across the Leif docs — from ESA/EFS to nvrbackup to bootstrap context.

The terms that show up across these docs, defined once. If a page drops an acronym you don’t recognize, it’s probably here.

Core model

  • Leif — the operations brain: a FastMCP server exposing 270+ tools, reached by Claude over MCP. See Architecture.
  • MCP (Model Context Protocol) — the protocol Claude uses to call Leif’s tools over HTTPS, through a Cloudflare Tunnel.
  • FastMCP — the server framework Leif runs on, on the Leif host (10.10.0.25).
  • One brain, one body — the design split: Claude is the brain (reasoning, judgment), Leif is the body (tool execution, state, side effects).
  • Self-document — Leif’s authoritative description of itself and its operating context. Read with read_self at the start of every session.
  • Bootstrap context / living docs — per-scope documents capturing the durable state of a subsystem; loaded with bootstrap_context. See Memory & State.
  • Checkpoint — saved state for in-flight multi-step work, so it can resume in a later session (save_progress / load_progress).
  • Commitment — a time-aware promise that resurfaces on a cadence; distinct from a task.

Hosts & infrastructure

  • nvrbackup — the pricing-app server (10.10.0.14, SSH :2223), reached with remote_*. Also hosts the finance/trading project. See Hosts.
  • SHTops — the SuperHiTech ops host (10.10.0.24): LibreNMS alerting, UniFi cache, the shtops-dashboard API. Reached with shtops_*.
  • obs-01 — the observability host (CT 111 on Proxmox): Grafana, Prometheus, Loki, Uptime Kuma, ntfy. See obs-01.
  • Proxmox / pve — the virtualization host running nearly every VM and container. Managed with pve_*.
  • LXC — a Linux container on Proxmox (vs. a full QEMU VM). obs-01 is an LXC.
  • RunPod — an on-demand cloud GPU pod for ML workloads; ephemeral (its SSH endpoint rotates per start). Reached with runpod_*.
  • Cloudflare Tunnel — maps the load-bearing hostnames leif.super-ht.com / mcp.super-ht.com to the Leif host; Claude’s MCP integration depends on it.
  • Cloudflare Pages — builds and serves this docs site (docs.leif.super-ht.com) from the superhitech/leif-docs repo.
  • Storj — object storage used as a backup destination.
  • Veeam / Van Wyk tunnel — customer (Van Wyk) Veeam replication rides a site-to-site tunnel that NATs 192.168.10.0/24 → 10.99.10.0/24. See Network Topology.

Business systems

  • RepairShopr (RS) — the system of record for tickets, customers, invoices. Tools: repairshopr_*. See RepairShopr Ticket Workflows.
  • QuickBooks Online (QBO) — accounting. Tools: quickbooks_*. See QuickBooks Reporting.
  • Hudu — IT documentation platform. Tools: hudu_*. See Hudu Documentation Workflows.
  • CWA (ConnectWise Automate) — the RMM (remote monitoring & management) for customer endpoints. Tools: cwa_*.
  • Growably / LeadConnector — the CRM (a GoHighLevel-family product). Tools: growably_*. See Growably CRM.
  • ShipStation — shipping/fulfillment. Tools: shipstation_*.
  • Keepa — Amazon price-history data source, used by the pricing app for enrichment.
  • Pabbly — the automation platform that ran the old ESA order workflows, replaced by the native ESA Order Processor.

Programs & order processing

  • ESA / EFS — the customer programs whose orders Leif processes (net-30, bundle-aware). See ESA Order Processing.
  • Odyssey (Iowa / Georgia / Louisiana / Utah), Tennessee Portal — the specific ESA/EFS programs, each mapping to one RepairShopr customer ID. See Customer ID Mapping.
  • net-30 — payment terms: due 30 days out. For ESA, computed from the ticket-created timestamp, not the invoice date.
  • Bundle — an ordered SKU that resolves into several physical component line items during processing.

Network, telephony & security

  • SonicWall — the edge firewall (Fail2Ban + policy drops). Read-only log analysis via sonicwall_* (Loki-backed).
  • UniFi — network gear; data cached on SHTops, read via unifi_*.
  • LibreNMS — distributed device monitoring over WireGuard to customer sites.
  • FreePBX — the VoIP phone system, on a Flowroute SIP trunk.
  • Flowroute — the SIP trunk provider for FreePBX.
  • SPF / DKIM / DMARC — email-authentication mechanisms. DMARC alignment is the strongest anti-spoof signal. See M365 Incident Investigation.
  • Homoglyph — a lookalike character/domain used in spoofing (e.g. rn for m); the typical email-fraud vector.
  • IC3 — the FBI’s Internet Crime Complaint Center (ic3.gov), where financial-fraud incidents get filed.