Sysadmin runbooks in a notes tree — never paste secrets into AI

Sysadmin runbooks in a tree: AI optional, secrets never

Incident night loves chat apps and hates unfinished Wikis. You paste a log fragment into a model, get a plausible next command, and — if you are careless — a password or API token rides along in the same clipboard. Six months later nobody knows which runbook is current because “the good version” lived in a Slack thread that scrolled away.

Three builds ship from this site. SEO Note 2.1 is the current one: an Electron app (about 121 MB installer) for Windows 10/11 64-bit and Linux x64, with Markdown, the tree editor, AI talking to a model you connect — a local one or any OpenAI-compatible endpoint, a web clipper and git sync of the file. For Android 6.0 and newer there is a release-signed APK (~10 MB) of the same interface; on the phone notes live as a folder of Markdown files on the device, and passwords, sync, the clipper and AI answer there with an explicit refusal. The classic build 1.3.34 (~2.5 MB, Win32) stays on the download page for Windows 7, 8 and 32-bit PCs, where 2.1 does not install; its notes file is .seo. All three work offline with no account: pick your build, or read how 2.1 and 1.3.34 differ.

SEO Note is a free Windows tree outliner (one local file, no account; 2.1 is a ~121 MB Electron installer, the classic 1.3.34 build ~2.5 MB). Structure ops knowledge as contour → runbook → postmortem. Models may help rephrase steps or turn a messy timeline into a draft postmortem — 2.1 calls an endpoint you connect, so an on-prem Ollama keeps a runbook off the network — and only on sanitized text you curated. This is the ops flavor of local notes as source of truth.

Ops knowledge vs disposable help

In SEO Note

Service contours

Runbook steps

Contacts / escalation

Postmortems + actions

In the AI chat

Sanitize-then-ask

Draft timelines

Wording cleanup

One-off command ideas

If the model never sees production credentials, you already won half the battle. The other half is writing the accepted steps back into the runbook node.

Tree skeleton for contours
Ops
  Contour — payments-api
    Inventory (hosts roles, no secrets)
    Runbooks
      Deploy
      Rollback
      Cert renew
      On-call first 15 min
    Escalation
    Postmortems
      2026-03-04 — latency spike
        Timeline
        Impact
        Actions (owners / due)
    AI scratch (redacted only)
  Contour — edge CDN
    Runbooks
    Postmortems
Inventory lists roles and hostnames you are allowed to document — not passwords. Put secrets in the vault your org already mandates; in the tree write “see vault: path/name” and stop.

Symptoms the runbook is not the authority

Two people paste different Rollback sequences into the incident channel

You find a token in an old AI chat while searching for a hostname

Postmortem Actions have no owners, so the same outage shape returns

On-call first 15 min lives only in someone’s head who is on holiday

What to paste into AI

Redact first. Replace tokens with <REDACTED>, strip customer PII, drop internal URLs you would not put in a public ticket. Paste one runbook section or a timeline stub — not the whole Ops parent.
Prompt:
You are helping edit an ops note. Do not invent credentials,
IPs, or ticket IDs. Point out missing steps as questions.
Rewrite the timeline below into clear bullets; flag ambiguity.
---
[paste redacted timeline or runbook section]
NEVER paste passwords, API keys, private keys, session cookies, connection strings with credentials, MFA backup codes, or full .env / vault exports into AI. If it unlocks something, it does not belong in a chat — period.

How-to in one sitting

Create Ops → one Contour you own on-call for → Inventory / Runbooks / Escalation / Postmortems / AI scratch.

Write On-call first 15 min as a checklist you could follow half-asleep (links to dashboards OK; no secrets).

Add Deploy and Rollback as sibling runbooks; keep steps numbered and dull on purpose.

For the last incident (even a small one), create a Postmortem child with Timeline / Impact / Actions.

If you want AI help on the timeline, redact a copy into AI scratch, paste that copy only, then merge accepted wording by hand.

Assign Actions with owners and due dates in the note — not only in the chat.

Copy the notes file to the backup location your team already trusts (USB, second disk, encrypted share policy).

Incident → note → optional AI

1 Stabilize with the runbook

2 Log timeline locally

3 Redact a copy if needed

4 Optional AI cleanup

5 Commit Actions in the tree

Chat as runbook Tree as runbook

Authority at 03:00 Whoever typed last Named Contour node

Secret hygiene Clipboard roulette Pointers to vault only

Postmortem reuse Lost in scroll Dated child + Actions

Offline lab / outage Model unreachable File still opens

Pitfalls and honest limits

“Just this once” pasting a token to “debug faster” — treat it as a credential leak and rotate

Letting AI invent firewall rules or kubectl commands you do not understand — verify against docs and staging

Three Rollback docs in three tools with no “source of truth” label — pick the tree or the official Wiki and link the other

SEO Note is not PagerDuty, not a secrets manager, not multiplayer Confluence; it is a private or team-local outline on Windows

No mobile parity, no sync with the phone, no model in the box — the AI in 2.1 calls an endpoint you connect and the APK has none. Pair with your existing on-call stack

Org policy may forbid any third-party AI on ops text; then skip the chat entirely and keep the tree

Privacy habits for any role — not only ops — live in related guides like what not to paste into AI when that page is on your reading list; the same spine shows up for freelancers in freelancer notes tree. PARA-style Areas (ongoing contours) vs Projects (this migration): PARA in a notes tree. Skeletons: templates.

Next steps

Create one Contour with On-call first 15 min and Rollback

Move secrets references to “vault path only”

File one recent incident as a Postmortem with Actions

Practice one redacted AI cleanup — or skip AI if policy says so

Verify a backup copy of the notes file exists off the main disk

Download SEO Note free and keep runbooks where you control the file — models never need your keys.

Keep going

Tree templates and PDF guide — role and method skeletons you can copy straight into your own tree.

If this guide helped, you can say hello or grab ready-made trees on the templates page.

Adjacent tools (VPS for local models, courses, VPN) are not stuffed into every paragraph. If an affiliate link appears, it will be labeled and is never required to use SEO Note.

Mini FAQ

Is SEO Note a replacement for a secrets manager or pager? It is not PagerDuty, not a secrets manager, not multiplayer Confluence - it is a private or team-local outline on Windows.

Where should runbook passwords live if not in the tree? In the vault your org already mandates; the node holds a see vault pointer with path and name, and inventory lists roles and hostnames only.

What if I pasted a token into an AI chat by mistake? Treat it as a credential leak and rotate it - just-this-once pasting to debug faster is listed as a pitfall.

How much of the ops tree should I paste into a model? Redact first, replacing tokens and stripping customer PII, then paste one runbook section or a timeline stub rather than the whole Ops parent.

Does the runbook still open during an outage or offline lab? An outage leaves the model unreachable, but the notes file still opens, which is why the named Contour node is the authority at 03:00.

Related: Source of truth for AI · Freelancer notes tree · PARA method tree · Backup notes to USB · Templates · FAQ

	Chat as runbook	Tree as runbook
Authority at 03:00	Whoever typed last	Named Contour node
Secret hygiene	Clipboard roulette	Pointers to vault only
Postmortem reuse	Lost in scroll	Dated child + Actions
Offline lab / outage	Model unreachable	File still opens