[Unit]
Description=FinanceManager canonical daily investment valuation (explicit opt-in)
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
WorkingDirectory=/home/agent/.hermes/worktrees/FinanceManager-main-deploy
Environment=PYTHONPATH=/home/agent/.hermes/worktrees/FinanceManager-main-deploy/src
Environment=JARVIS_FINANCE_ENV=local
Environment=JARVIS_FINANCE_DB_PATH=/home/agent/jarvis_runtime/finance-system/data/finance.sqlite3
Environment=JARVIS_FINANCE_RUNTIME_DIR=/home/agent/jarvis_runtime/finance-system
Environment=JARVIS_FINANCE_WRITE_MODE=local_only
# Fail closed after deployment. Set to 1 only after a separate explicit
# activation confirmation and install/reload this unit deliberately.
Environment=JARVIS_FINANCE_DAILY_VALUATION_ENABLED=0
ExecStart=/home/agent/jarvis_runtime/finance-system/venv/bin/python -m jarvis_finance.cli.main run-daily-market-valuation --fx-provider frankfurter
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=read-only
ReadWritePaths=/home/agent/jarvis_runtime/finance-system