Progress Note — 2026-03-05

Session with Claude (Sonnet 4.6) covering SSH authentication setup with 1Password, documentation of authentication modes, account strategy planning, and restructuring of the A30 section.

---

Work Done

Completed and verified SSH authentication architecture using 1Password as the sole key agent across Mac, Raspberry Pi hosts, and GitHub. See the reference doc:

[SSH Authentication Setup](../SSH Authentication Setup.md)

Changes made to the Mac:

• ~/.zprofile — added SSH_AUTH_SOCK export pointing to 1Password agent socket
• ~/.ssh/config — added IdentityAgent globally, ForwardAgent yes on all RPi hosts, Host github.com stanza; removed id_rsa from IdentityFile; set AddKeysToAgent no

Documentation restructuring

The A30-Architectural Decisions section is being phased out in favour of plain-language service descriptions in 20-Services. ARD01–06 moved to _system/archive/ for reference until any remaining useful content is migrated. ARD07 (account strategy — still open) moved to A20-MetaDoc/ as a working planning document.

New and updated service pages:

• 20-Services/Docker.md — created, content from ARD03
• 20-Services/DropBox.md — filled from ARD05
• A20-MetaDoc/SSH Authentication Setup.md — expanded to cover all three 1Password auth modes (SSH agent, op CLI interactive, op CLI service account)

Still to do in 20-Services:

• Github.md — stub, needs content
• 1Password.md — has content; consider adding a pointer to the auth setup doc
• Internal services (n8n, Home Assistant, etc.) — stubs exist in index, need pages

Verified Working

• Mac → RPi (all hosts) via 1Password agent
• Mac → GitHub SSH auth (sshkey.github)
• RPi → GitHub via agent forwarding (no keys on the Pi)
• VSCode git extension (required SSH_AUTH_SOCK fix in ~/.zprofile)