59 Commits

Author SHA1 Message Date
Hermes Agent
7a55b259bf hermes: add the fenced three-node distributed execution pool
Three fenced worker Pods claim Hermes Kanban runs through a coordinator that
owns every state transition, with per-ordinal HMAC authority, a mediated
broker-only SCM path, and durable per-ordinal workspaces.

Content is the reviewed head of PR #18 (689bcb6e) with PR 16's and PR 19's
contributions removed: they were merged in only to validate co-existence and are
not prerequisites, so this branch no longer carries them as ancestors. Only PR 14
and PR 15 remain, because the broker boundary and the cli_lane_* decomposition
are load-bearing for two of the fixed P0 boundaries.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-17 16:31:15 +00:00
Hermes Agent
03b10ff8b1 Merge PR 15 (CLI lane decomposition) on top of PR 14 (Atlas SCM broker)
The distributed worker pool stacks on exactly two open pull requests, in this
order: PR 14 supplies the broker-only SCM boundary the mediators route through
and the hermes-scm-boundary-v2 ConfigMap they mount, and PR 15 supplies the
cli_lane_* decomposition -- including canonical_run_id and the eligibility
predicate on claim_ready -- that the coordinator depends on. Neither can be
dropped without breaking a fixed P0 boundary, so both are carried here as
prerequisites and this branch must not merge before them.

PR 16 (agent image release lane) and PR 19 (full-handoff acceptance harness)
are NOT prerequisites and are deliberately absent, so reviewing this branch no
longer means approving them.

PR 14 and PR 15 conflict with each other in nine paths. Each is resolved to the
resolution already reviewed on this branch at 4d4cf1bd.
2026-08-17 16:29:29 +00:00
jenkins
73fefbb5d9 hermes: gate mixed image lane APIs 2026-08-17 08:16:35 -03:00
jenkins
8c6e3acdac hermes: isolate Atlas SCM write authority 2026-08-17 07:58:44 -03:00
jenkins
762784da6b hermes: bound Atlas pull request client 2026-08-17 07:22:26 -03:00
jenkins
1ba9f13959 hermes: bind terminal commit to journal inode 2026-08-17 07:19:10 -03:00
jenkins
0dd6ea0f02 hermes: add durable Telegram topics 2026-08-16 15:59:09 -03:00
jenkins
1527fd1af0 hermes: enforce goal completion evidence 2026-08-16 11:11:38 -03:00
jenkins
c7ac16d206 hermes: harden Atlas forge workflow 2026-08-16 07:59:35 -03:00
jenkins
612cefad23 monitoring(ai): add provider quota operations dashboard 2026-08-16 05:13:20 -03:00
jenkins
012e5fc2ba hermes: recover stale kanban status pages 2026-08-16 04:49:02 -03:00
jenkins
4bab6130bc hermes: close parked kanban tasks atomically 2026-08-16 04:31:00 -03:00
jenkins
7d284871e8 hermes: show activity during dashboard bootstrap 2026-08-16 03:33:41 -03:00
jenkins
9bc47f9ce3 hermes: keep durable worker activity visible 2026-08-16 01:20:08 -03:00
jenkins
1d2d386aeb hermes: pin ARM64 runtime images 2026-08-15 22:32:08 -03:00
jenkins
c646bb264e hermes: pin live recovery images 2026-08-15 22:15:40 -03:00
jenkins
89b9f1a4c7 hermes: isolate runtime access and expose activity 2026-08-15 22:15:40 -03:00
jenkins
de426607bd hermes: roll live activity and Vault access image 2026-08-15 14:03:55 -03:00
jenkins
2ae88973be hermes: add audited Atlas operator access 2026-08-15 13:22:01 -03:00
jenkins
29eeb1ebf8 hermes: recover workers after pod restart 2026-08-15 07:07:21 -03:00
jenkins
846c890527 hermes: load tool credentials before s6 2026-08-15 03:44:00 -03:00
jenkins
f7492defdd hermes: recover Kanban and tool execution 2026-08-15 03:35:26 -03:00
jenkins
c21203b7ea hermes: deliver generated media to Telegram 2026-08-15 00:34:08 -03:00
jenkins
9fa7612cd4 hermes: restore terminal rendering and worker lineage 2026-08-13 02:49:41 -03:00
jenkins
811201561e hermes: roll out subscription status correction 2026-08-13 00:22:55 -03:00
jenkins
c11408258c hermes: restore native provider routing 2026-08-12 23:08:21 -03:00
jenkins
d8566f007f hermes: recover interrupted provider streams 2026-08-12 10:41:47 -03:00
jenkins
521f9f0b1b hermes: bound local routing context 2026-08-12 09:40:20 -03:00
jenkins
49a0e2eb49 hermes: expose provider pool status 2026-08-12 02:23:31 -03:00
jenkins
422f001a93 hermes: make Switchyard the routing authority 2026-08-11 20:22:26 -03:00
jenkins
88f764a7c8 hermes: add automatic hosted and local image routes 2026-08-11 05:20:18 -03:00
jenkins
1e07d4c256 hermes: broker isolated chat through Codex 2026-08-11 03:15:34 -03:00
jenkins
b58afef655 hermes: deploy arm64 dashboard auth recovery 2026-08-11 02:48:31 -03:00
jenkins
388abff7c4 hermes: prewarm arm64 agent image 2026-08-11 02:46:29 -03:00
jenkins
436c9605bf hermes: stabilize oauth sessions and enable images 2026-08-11 01:51:30 -03:00
jenkins
8df3d3314c hermes: add private image generation and repair xhigh fallback 2026-08-11 01:14:46 -03:00
jenkins
bbb926526e hermes(agent): route native Codex through CLI runtime 2026-08-10 22:39:51 -03:00
jenkins
94ea0253c4 hermes(agent): restore stock dashboard reliability 2026-08-10 21:09:06 -03:00
jenkins
f2a3616476 hermes: grant owner agent union access 2026-08-10 17:05:14 -03:00
jenkins
c817f3cef7 hermes(agent): replace HERDR with native CLI lanes 2026-08-10 16:31:06 -03:00
jenkins
379d2ea52e fix(hermes): run coding workers unattended 2026-08-10 02:15:34 -03:00
jenkins
4d029f85b7 feat(hermes): add private voice and isolated workflows 2026-08-10 00:43:10 -03:00
jenkins
d5d70c0020 fix(hermes): make browser terminal copy reliable 2026-08-09 15:52:06 -03:00
jenkins
d71624410a fix(hermes): provision Cassandra diagnostics 2026-08-09 14:38:51 -03:00
jenkins
fc99d114a3 fix(hermes): route new agent tabs 2026-08-09 14:08:45 -03:00
jenkins
772f05ac2e security(hermes): canary current oauth proxy 2026-08-09 13:40:58 -03:00
jenkins
9bdcddad7c feat(hermes): add Jetson-assisted auto routing 2026-08-09 02:42:30 -03:00
jenkins
639ac031a8 feat(hermes): strengthen isolated chat reasoning 2026-08-08 23:25:16 -03:00
jenkins
5bb04b37c7 fix(hermes): restore isolated user features 2026-08-08 21:28:33 -03:00
jenkins
04b42b1208 fix(hermes): harden non-root startup 2026-08-08 18:17:30 -03:00