Wow, this is an absolutely wonderful write-up, thank you!

Are you planning on using a specific package for your PA agent? Or is this something you plan on developing in house?

I am actually very interested in the news feed thing. How do you find duplicates in the news feeds? Wouldn’t you have to pull the actual articles and then have MB of data to shift through which would exceed the window? Do you use a vector DB? Do you just have it use curl or do you pay for an Internet API service?

And move SSH to a non-default port. Without that, my public-facing servers get thousands of SSH attacks a day, and it basically goes to zero after moving it to a random-looking high port.

Also, totally agree with using public key login and disable password login.