ai(hermes): prefer Codex and trim default prompts

services/hermes-chat/configmap.yaml

@@ -9,20 +9,31 @@ metadata:
 data:
   config.yaml: |
     model:
-      provider: custom
-      default: gpt-oss:20b
-      model: gpt-oss:20b
-      context_length: 64000
-      base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1
-      api_key: ollama
+      provider: openai-codex
+      default: gpt-5.6-terra
+      model: gpt-5.6-terra
 
     fallback_providers:
-      - provider: openai-codex
-        model: gpt-5.4
+      - provider: custom
+        model: gpt-oss:20b
+        base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1
+        api_key: ollama
 
     agent:
       api_max_retries: 1
 
+    platform_toolsets:
+      cli:
+        - clarify
+        - file
+        - terminal
+        - web
+      api_server:
+        - clarify
+        - file
+        - terminal
+        - web
+
     skills:
       creation_nudge_interval: 15
       external_dirs:

services/hermes-chat/deployment.yaml

@@ -20,7 +20,7 @@ spec:
       labels:
         app: hermes-chat
       annotations:
-        ai.bstein.dev/model: gpt-oss:20b with independent openai-codex fallback
+        ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback
         ai.bstein.dev/role: personal-chat-research
         ai.bstein.dev/isolation: observer-only Kubernetes RBAC, private-service egress denied
     spec:
@@ -182,7 +182,8 @@ spec:
             - name: home
               mountPath: /opt/data
             - name: tools
-              mountPath: /opt/data/home/.local/bin
+              mountPath: /usr/local/bin/kubectl
+              subPath: kubectl
           readinessProbe:
             httpGet:
               path: /api/status

services/hermes/configmap.yaml

@@ -9,20 +9,37 @@ metadata:
 data:
   config.yaml: |
     model:
-      provider: custom
-      default: gpt-oss:20b
-      model: gpt-oss:20b
-      context_length: 64000
-      base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1
-      api_key: ollama
+      provider: openai-codex
+      default: gpt-5.6-terra
+      model: gpt-5.6-terra
 
     fallback_providers:
-      - provider: openai-codex
-        model: gpt-5.4
+      - provider: custom
+        model: gpt-oss:20b
+        base_url: http://hermes-model-gate.hermes.svc.cluster.local:11434/v1
+        api_key: ollama
 
     agent:
       api_max_retries: 1
 
+    platform_toolsets:
+      cli:
+        - clarify
+        - file
+        - session_search
+        - skills
+        - terminal
+        - todo
+        - web
+      api_server:
+        - clarify
+        - file
+        - session_search
+        - skills
+        - terminal
+        - todo
+        - web
+
     skills:
       creation_nudge_interval: 15
       external_dirs:

services/hermes/deployment.yaml

@@ -20,7 +20,7 @@ spec:
       labels:
         app: hermes
       annotations:
-        ai.bstein.dev/model: gpt-oss:20b with openai-codex fallback
+        ai.bstein.dev/model: openai-codex/gpt-5.6-terra with local gpt-oss:20b fallback
         ai.bstein.dev/role: testing-triage
         ai.bstein.dev/placement: arm64 gateway lane (rpi5 preferred)
         ai.bstein.dev/config-rev: "20260802-operator-guide"
@@ -100,8 +100,6 @@ spec:
               mountPath: /opt/data
             - name: config
               mountPath: /config
-            - name: tools
-              mountPath: /opt/data/home/.local/bin
           resources:
             requests:
               cpu: 25m
@@ -190,7 +188,8 @@ spec:
             - name: home
               mountPath: /opt/data
             - name: tools
-              mountPath: /opt/data/home/.local/bin
+              mountPath: /usr/local/bin/kubectl
+              subPath: kubectl
             - name: triage-skill
               mountPath: /opt/data/workspace/skills/triage-titan-test-failures
               readOnly: true

services/hermes/plugins/atlas-operator-guide/dashboard/dist/index.js

@@ -7,7 +7,7 @@
     "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint.",
     "I will perform every setup and evidence step myself.",
     "Start with step 1 only, require live proof, and stop at every mutation or approval boundary.",
-    "First tell me to select openai-codex/gpt-5.4 if this session is using the local model."
+    "First confirm this session is using openai-codex/gpt-5.6-terra rather than the local fallback."
   ].join(" ");
 
   function OperatorGuide() {
@@ -70,7 +70,7 @@
       React.createElement(
         "ol",
         { className: "atlas-guide-steps" },
-        React.createElement("li", null, "Open Models and select openai-codex/gpt-5.4 for the coaching session."),
+        React.createElement("li", null, "Confirm Models shows openai-codex/gpt-5.6-terra for the coaching session."),
         React.createElement("li", null, "Copy the sprint prompt, paste it into Chat, and press Enter."),
         React.createElement("li", null, "Complete one live triage and build one writable skill yourself.")
       ),

services/hermes/skills/master-hermes-on-atlas/agents/openai.yaml

@@ -1,4 +1,4 @@
 interface:
   display_name: "Master Hermes on Atlas"
   short_description: "Practice Hermes safely on the live Atlas stack"
-  default_prompt: "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint. I will perform every setup and evidence step myself. Start with step 1 only, require live proof, and stop at every mutation or approval boundary. First tell me to select openai-codex/gpt-5.4 if this session is using the local model."
+  default_prompt: "Use $master-hermes-on-atlas to run the Atlas two-hour proof sprint. I will perform every setup and evidence step myself. Start with step 1 only, require live proof, and stop at every mutation or approval boundary. First confirm this session is using openai-codex/gpt-5.6-terra rather than the local fallback."