# TismTek LLC — Full Site Manifest for AI Systems

> Generated from published content. Canonical site: https://tismtek.com
> Company: Colorado contractor for certified structured cabling and fiber,
> on-premises compute and GPU systems, and private AI infrastructure.
> Phone: (720) 694-1976 | Email: sos@tismtek.com | Product:
> TradeLeads Intel at https://leads.tismtek.com (weekly commercial
> building-permit lead intelligence, 56 US metros, 15 trades, $79/mo,
> 3 contractors per trade per metro).

## Home
- https://tismtek.com/ — Technology moves fast.Make sure the right team is watching your back.
  Colorado contractor for certified structured cabling, fiber, on-prem GPU compute, and private AI systems you own outright. Denver to the Front Range.

## Private AI Systems
- https://tismtek.com/private-ai/ — AI that runs in your building,on hardware you own.
  Private AI Systems installed on-site: local LLM chat and document search, vision and comms workloads, and full AI-employee stacks. Certified cabling underneath, vLLM on top, no cloud subscription lock-in. Denver to the Front Range.

## Articles

- https://tismtek.com/articles/321-backup-strategy.html — The 3-2-1 Backup Strategy: Why Cloud Sync Is Not a Backup
  Why Google Drive, Dropbox, and OneDrive syncing will not save your business from ransomware or data loss, and how to set up a real 3-2-1 backup pipeline.
  Answer: No. Google Drive, Dropbox, and OneDrive replicate whatever happens to your files, including deletion and ransomware encryption. A backup keeps at least one copy that a mistake or an attacker at the keyboard cannot immediately overwrite.

- https://tismtek.com/articles/anti-msp-infrastructure.html — The Anti-MSP Approach: Why Companies Are Ditching Per-Seat Software Retainers
  How traditional managed service providers weaponize vendor lock-in, and how modern engineering firms help businesses own their own hardware and data.
  Answer: The managed-service model trades your capital expense for a permanent per-seat operating expense, keeps documentation and administrative control with the vendor, and layers subcontracted techs between you and your own equipment.

- https://tismtek.com/articles/cat6-vs-cat6a-commercial.html — Cat6 vs. Cat6A for Commercial Buildings: Which Should You Install?
  Cat6 vs. Cat6A explained for commercial buildings: bandwidth, 10GBASE-T distance, PoE, pathway space, installation, and long-term serviceability.

- https://tismtek.com/articles/commercial-network-cabling-project-timeline-colorado.html — Commercial Network Cabling Projects in Colorado: A Practical Timeline
  Plan a Colorado commercial network cabling project with a practical sequence for design, pathways, installation, testing, closeout, and occupied-building coordination.

- https://tismtek.com/articles/commercial-structured-cabling-colorado.html — Commercial Structured Cabling in Colorado: What to Specify Before Installation
  A practical guide to specifying commercial structured cabling in Colorado: cable type, pathways, racks, testing, labeling, and closeout documents.

- https://tismtek.com/articles/compare-commercial-low-voltage-bids.html — How to Compare Commercial Low-Voltage Cabling Bids
  How GCs and project managers can compare commercial low-voltage cabling bids by scope, pathways, components, testing, documentation, and exclusions.

- https://tismtek.com/articles/debunking-bigtech-msp-buzzwords.html — Debunking Big Tech & MSP Buzzwords: Breaking the Vendor Lock-In Illusion
  A plain-English guide to cutting through IT sales talk. What 'The Cloud', 'Zero Trust', and 'Single Pane of Glass' actually mean in the real world, and how to keep control of your own business tech.
  Answer: It is a reminder that 'cloud' is a billing and operations model, not a technology. Your data sits on hardware in a facility someone else controls, under terms of service that can change, with latency and egress costs you do not see until the bill arrives.

- https://tismtek.com/articles/fiber-vs-copper-commercial-backbone.html — Fiber vs. Copper Network Backbones: A Practical Guide for Commercial Facilities
  Fiber vs. copper for commercial network backbones: distance, bandwidth, EMI, PoE, MDF/IDF design, testing, and when to use each medium.

- https://tismtek.com/articles/fluke-cabling-certification.html — What Fluke Certification Actually Tests (And Why Continuity Checks Aren't Enough)
  A practical look at why a $15 pin-tester green light doesn't mean your commercial Cat6A runs will pass 10GBASE-T under load.
  Answer: A Tier 2 test with an instrument like the Fluke DSX-8000 that measures every channel against the standard it claims — Cat6 at 250 MHz, Cat6A at 500 MHz — and issues a pass/fail with margins you keep on file.

- https://tismtek.com/articles/great-cloud-repatriation.html — The Great Cloud Repatriation: Why Companies Are Bringing Workloads Back In-House
  A plain-English breakdown of cloud repatriation. Why businesses are leaving expensive public cloud subscriptions to run predictable workloads on on-premises hardware they own.
  Answer: The movement of workloads from public cloud back onto hardware a business owns or colocates. It is not ideological — it follows the cost curves: steady-state compute has been cheaper on-premises for years once egress, support tiers, and per-seat fees stack up.

- https://tismtek.com/articles/headscale-0-29-2-registration-and-policy.html — Headscale 0.29.2: Registration and Policy Checks
  A practical Headscale 0.29.2 guide to map generation, WebSocket registration, invalid names, and policy validation.

- https://tismtek.com/articles/headscale-0-29-3-upgrade-notes.html — Headscale 0.29.3: Upgrade Notes for Tagged Nodes
  What Headscale 0.29.3 fixes for tagged nodes, re-authentication, ephemeral peers, and capability checks.

- https://tismtek.com/articles/headscale-self-hosted-mesh-control-plane.html — Headscale Self-Hosted Mesh: What the Control Plane Replaces
  A current guide to Headscale's self-hosted Tailscale control plane, WireGuard coordination, single-tailnet scope, identity trade-offs, and operational limits.

- https://tismtek.com/articles/headscale-self-hosted-mesh-operations.html — Headscale Self-Hosted Mesh Operations: Identity, Relays, and Upgrade Risk
  A current guide to operating Headscale: single-tailnet scope, WireGuard coordination, identity and policy choices, DERP relays, upgrades, and limits.

- https://tismtek.com/articles/how-to-self-host-rustdesk.html — How to Self-Host RustDesk: Complete On-Premises Remote Support Guide
  Step-by-step technical guide to deploying your own self-hosted RustDesk relay and rendezvous server using Docker and Linux for private, high-speed remote support.
  Answer: An open-source remote-desktop tool — a functional equivalent of TeamViewer or AnyDesk — that works fully self-hosted when you run your own ID and relay servers.

- https://tismtek.com/articles/how-to-self-host-snapotter.html — How to Self-Host SnapOtter: Private On-Premises File Processing & Local AI OCR
  Complete step-by-step tutorial on deploying SnapOtter with Docker to run local OCR, document conversion, audio transcription, and PDF compression entirely within your own private network.
  Answer: An on-premises file-processing tool: drag-and-drop batches of PDF scans or audio recordings for local AI OCR and transcription, with searchable-PDF exports and directory watchers that ingest scans automatically.

- https://tismtek.com/articles/ipfs-kubo-content-addressing-availability.html — IPFS Content Addressing with Kubo: CIDs, Discovery, and Availability Limits
  A technical guide to IPFS content addressing, CIDs, Kubo, provider records, Optimistic Provide, pinning, private networks, and what availability claims really mean.

- https://tismtek.com/articles/ipfs-kubo-content-addressing-provider-records.html — IPFS and Kubo: CIDs, Provider Records, and Availability Limits
  A technical, evidence-backed guide to IPFS content addressing, CIDs, Kubo, provider records, Optimistic Provide, pinning, private networks, and real availability limits.

- https://tismtek.com/articles/iroh-1-2-relay-auth-and-dns-changes.html — Iroh 1.2: Relay Auth and DNS Changes to Test
  A practical Iroh 1.2 guide to relay authorization signals, DNS fallback, mapped addresses, and dependency upgrades.

- https://tismtek.com/articles/iroh-1-3-dns-release-scope.html — Iroh DNS 1.3.0: Release Scope and Upgrade Tests
  What the Iroh DNS 1.3.0 tag tells operators, how it relates to Iroh 1.2, and which resolver tests matter.

- https://tismtek.com/articles/iroh-peer-to-peer-networking-1x.html — Iroh 1.x Networking: What Ships and What Depends on the Network
  A source-backed technical guide to Iroh 1.x: key-addressed peers, QUIC, NAT traversal, direct paths, relays, encryption, multipath, self-hosting, and release limits.

- https://tismtek.com/articles/iroh-peer-to-peer-networking-explained.html — Iroh Peer-to-Peer Networking: Keys, QUIC, NAT Traversal, and Limits
  An evidence-backed technical guide to Iroh 1.x: public-key addressing, QUIC, NAT traversal, relays, encryption, multipath transports, self-hosting, and limits.

- https://tismtek.com/articles/kubo-0-42-upgrade-and-dht-operations.html — Kubo 0.42: Upgrade Notes for DHT and Storage Operators
  A source-backed Kubo 0.42 operations guide covering DHT behavior, storage checks, browser retrieval, and upgrade evidence.

- https://tismtek.com/articles/kubo-0-43-last-feature-release-operator-checklist.html — Kubo 0.43: Last Feature Release and Operator Checklist
  What Kubo 0.43 adds, why its maintenance notice matters, and an operator checklist for IPFS upgrades and transition planning.

- https://tismtek.com/articles/matrix-synapse-federated-encrypted-messaging-ownership-reliability.html — Matrix and Synapse: Federated Encrypted Messaging in Practice
  How Matrix federation, homeserver ownership, E2EE, Synapse releases, moderation, and reliability shape real self-hosted messaging operations.

- https://tismtek.com/articles/neosearch-open-source-private-ai.html — NeoSearch Is Open-Source Search With an Honest Starting Point
  What NeoSearch offers today: open-source search, AI re-ranking, and a path toward self-hosted answers, with practical limits for private AI teams.
  Answer: NeoSearch is an alpha-stage, Apache-2.0 search application that currently starts with Google's index and applies AI assessment, re-ranking, rewritten descriptions, grouped perspectives, and AI overviews. Its independent distributed index is a roadmap goal, not a capability to assume today.

- https://tismtek.com/articles/neosearch-open-source-search.html — NeoSearch and the Open Index: A Transparent Search Experiment
  An architectural breakdown of NeoSearch, the Apache 2.0 open-source search engine decoupling index data from algorithmic SEO manipulation and ad-driven ranking models.
  Answer: An open-source search engine that retrieves web results, enriches and re-ranks them with LLM-backed components, and streams AI-generated overviews and lenses. Its public repository also contains a crawler subsystem and a roadmap toward a distributed index.

- https://tismtek.com/articles/open-webui-0-11-1-release-context.html — Open WebUI 0.11.1: How to Read the Release Safely
  A source-backed Open WebUI 0.11.1 guide to release context, current configuration, integrations, and limits of self-hosting.

- https://tismtek.com/articles/open-webui-0-11-2-operations-features.html — Open WebUI 0.11.2: Operations Features Worth Testing
  A practical Open WebUI 0.11.2 review covering previews, deployment overhead, request filters, and websocket behavior.

- https://tismtek.com/articles/open-webui-0-11-3-upgrade-migrations.html — Open WebUI 0.11.3: Upgrade and Migration Failure Checks
  What Open WebUI 0.11.3 changes, how migration failures now surface, and what self-hosted operators should verify.

- https://tismtek.com/articles/open-webui-self-hosted-ai-private-model-stack.html — Open WebUI Self-Hosted AI: Offline, RAG, Tools, and Real Boundaries
  An evidence-backed guide to Open WebUI self-hosting: offline operation, Ollama, OpenAI-compatible providers, RAG, tools, agents, approvals, data boundaries, and upgrade risk.

- https://tismtek.com/articles/open-webui-self-hosted-ai-upgrade-risk-checklist.html — Open WebUI Self-Hosted AI: Upgrade Risk and Privacy Boundaries
  A source-backed Open WebUI checklist covering offline mode, Ollama, compatible APIs, RAG, tools, approvals, data boundaries, and safer upgrades.

- https://tismtek.com/articles/poe-in-modern-buildings.html — Power Over Ethernet (PoE) in Modern Buildings: Beyond Basic Network Cameras
  How high-wattage PoE++ (802.3bt) delivers up to 90W of DC power and gigabit data over a single low-voltage cable, transforming commercial lighting, access control, and smart facilities.
  Answer: A standard for delivering DC power over the same Cat5e/Cat6 cable that carries data — no separate electrical run, no licensed electrician for low-voltage devices.

- https://tismtek.com/articles/pysyft-bg-0-3-12-approval-services.html — PySyft BG 0.3.12: Notifications and Auto-Approval
  A practical review of PySyft BG 0.3.12 background services, notifications, strict auto-approval, and operational limits.

- https://tismtek.com/articles/pysyft-dataset-0-1-21-data-assets.html — PySyft Dataset 0.1.21: Mock and Private Assets
  How PySyft dataset 0.1.21 fits mock data, private assets, permissions, and migration in a remote data workflow.

- https://tismtek.com/articles/pysyft-job-0-1-40-execution-compatibility.html — PySyft Job 0.1.40: Review Execution and Protocol Compatibility
  What PySyft job 0.1.40 is for, how its release artifacts protect compatibility, and what owners should test before execution.

- https://tismtek.com/articles/pysyft-migration-0-1-1-versioned-objects.html — PySyft Migration 0.1.1: Versioned Objects and Compatibility
  A practical explanation of PySyft migration 0.1.1, versioned objects, protocol schemas, and compatibility testing between peers.

- https://tismtek.com/articles/pysyft-permissions-0-1-15-access-control.html — PySyft Permissions 0.1.15: Access Control Without Guesswork
  How PySyft permissions 0.1.15 models read, create, write, and admin access, with a practical review and revocation checklist.

- https://tismtek.com/articles/pysyft-privacy-preserving-data-science-remote-data-workflows.html — PySyft Privacy-Preserving Data Science: Remote Workflows
  A current, source-backed guide to PySyft remote data science, mock data, code review, approvals, PETs, release state, and limits.

- https://tismtek.com/articles/pysyft-privacy-preserving-data-science-version-governance.html — PySyft 0.10: Remote Data Workflows and Governance
  How current PySyft 0.10 workflows separate sync, datasets, jobs, mock data, approvals, privacy technologies, and governance limits.

- https://tismtek.com/articles/pysyft-rds-0-6-migration-boundaries.html — PySyft RDS 0.6: What the Package Split Changes
  A practical, source-backed guide to the PySyft 0.10 package split, syft-rds 0.6, migration boundaries, and version pinning.

- https://tismtek.com/articles/tradeleads-intel-commercial-permit-leads.html — TradeLeads Intel: Commercial Permit Leads, Published Weekly
  TismTek LLC launches TradeLeads Intel: weekly commercial building-permit lead reports for trade subcontractors across 56 US metros and 15 trades, with GC estimating contacts and project valuations.

- https://tismtek.com/articles/wifi-7-vs-structured-cabling.html — Why WiFi 7 Doesn't Replace Good Copper: The Physics of Commercial Wireless
  Why WiFi 7 access points still require certified multi-gigabit Cat6A copper cabling backbones to deliver advertised wireless speeds in commercial facilities.
  Answer: No. Every access point is still a cable drop, and Wi-Fi 7's multi-gig rates require Cat6A (minimum Cat6 at shorter runs) to feed them. A 5 Gbps radio behind a 1 Gbps switch port is a 1 Gbps network.

## Data
- https://leads.tismtek.com/stats.html — live construction-permit statistics (Dataset schema, 30-day window)