Hermes Agent
7a55b259bf
hermes: add the fenced three-node distributed execution pool
...
Three fenced worker Pods claim Hermes Kanban runs through a coordinator that
owns every state transition, with per-ordinal HMAC authority, a mediated
broker-only SCM path, and durable per-ordinal workspaces.
Content is the reviewed head of PR #18 (689bcb6e) with PR 16's and PR 19's
contributions removed: they were merged in only to validate co-existence and are
not prerequisites, so this branch no longer carries them as ancestors. Only PR 14
and PR 15 remain, because the broker boundary and the cli_lane_* decomposition
are load-bearing for two of the fixed P0 boundaries.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-17 16:31:15 +00:00
Hermes Agent
03b10ff8b1
Merge PR 15 (CLI lane decomposition) on top of PR 14 (Atlas SCM broker)
...
The distributed worker pool stacks on exactly two open pull requests, in this
order: PR 14 supplies the broker-only SCM boundary the mediators route through
and the hermes-scm-boundary-v2 ConfigMap they mount, and PR 15 supplies the
cli_lane_* decomposition -- including canonical_run_id and the eligibility
predicate on claim_ready -- that the coordinator depends on. Neither can be
dropped without breaking a fixed P0 boundary, so both are carried here as
prerequisites and this branch must not merge before them.
PR 16 (agent image release lane) and PR 19 (full-handoff acceptance harness)
are NOT prerequisites and are deliberately absent, so reviewing this branch no
longer means approving them.
PR 14 and PR 15 conflict with each other in nine paths. Each is resolved to the
resolution already reviewed on this branch at 4d4cf1bd.
2026-08-17 16:29:29 +00:00
jenkins
73fefbb5d9
hermes: gate mixed image lane APIs
2026-08-17 08:16:35 -03:00
jenkins
8c6e3acdac
hermes: isolate Atlas SCM write authority
2026-08-17 07:58:44 -03:00
jenkins
2c1d97e551
hermes: match canonical Forgejo PR URL
2026-08-17 07:22:26 -03:00
jenkins
cf3e46c2b6
hermes: harden Forgejo client boundary
2026-08-17 07:22:26 -03:00
jenkins
762784da6b
hermes: bound Atlas pull request client
2026-08-17 07:22:26 -03:00
jenkins
1ba9f13959
hermes: bind terminal commit to journal inode
2026-08-17 07:19:10 -03:00
jenkins
8c71d55853
hermes: harden journal quarantine races
2026-08-17 07:15:31 -03:00
jenkins
c20bc263e0
hermes: close terminal replay edge cases
2026-08-17 07:15:31 -03:00
jenkins
64ea6d685c
hermes: harden replay and decomposition races
2026-08-17 07:15:31 -03:00
jenkins
f04a524738
hermes: preserve terminal results and prevent duplicate fanout
2026-08-17 07:15:31 -03:00
jenkins
0dd6ea0f02
hermes: add durable Telegram topics
2026-08-16 15:59:09 -03:00
jenkins
ba590c2518
hermes: retain native auth failure health
2026-08-16 13:47:19 -03:00
jenkins
e8b4f0c57c
hermes: widen local goal judge timeout
2026-08-16 13:29:10 -03:00
jenkins
2a103f9895
hermes: require findings in worker schema
2026-08-16 12:04:27 -03:00
jenkins
1ea8e16286
hermes: separate review findings from blockers
2026-08-16 11:54:26 -03:00
jenkins
42ac76fe67
hermes: carry goal-loop controller evidence
2026-08-16 11:27:24 -03:00
jenkins
1527fd1af0
hermes: enforce goal completion evidence
2026-08-16 11:11:38 -03:00
jenkins
2a94c7c74f
hermes: isolate worker database lifetimes
2026-08-16 10:30:58 -03:00
jenkins
e758ee1059
hermes: survive transient Kanban storage faults
2026-08-16 09:33:30 -03:00
jenkins
18eeeabb62
hermes: avoid unavailable worker providers
2026-08-16 09:19:23 -03:00
jenkins
c0eda84fa1
hermes: recover stale Codex worker threads
2026-08-16 08:54:19 -03:00
jenkins
3b003b850d
hermes: preserve Vault CLI credentials for workers
2026-08-16 08:39:45 -03:00
jenkins
46f37f32a3
hermes: streamline forge evidence tools
2026-08-16 08:21:33 -03:00
jenkins
c7ac16d206
hermes: harden Atlas forge workflow
2026-08-16 07:59:35 -03:00
jenkins
ece52b1f2e
hermes: harden routed vision normalization
2026-08-16 07:24:20 -03:00
jenkins
8f7b57419a
hermes: accept routed base64 vision
2026-08-16 07:12:11 -03:00
jenkins
bfd53100d9
hermes: normalize routed vision messages
2026-08-16 07:00:50 -03:00
jenkins
5dd13368c6
hermes: normalize vision requests for Codex
2026-08-16 06:55:49 -03:00
jenkins
bebd92212e
hermes: install pinned Go toolchain
2026-08-16 05:38:01 -03:00
jenkins
612cefad23
monitoring(ai): add provider quota operations dashboard
2026-08-16 05:13:20 -03:00
jenkins
012e5fc2ba
hermes: recover stale kanban status pages
2026-08-16 04:49:02 -03:00
jenkins
eace0ed0df
hermes: scope stale activity lineage
2026-08-16 02:51:33 -03:00
jenkins
9bc47f9ce3
hermes: keep durable worker activity visible
2026-08-16 01:20:08 -03:00
jenkins
e9efec4ddf
hermes: keep provider lanes available under load
2026-08-15 22:15:40 -03:00
jenkins
89b9f1a4c7
hermes: isolate runtime access and expose activity
2026-08-15 22:15:40 -03:00
jenkins
6fd7b9bbba
hermes: close stale API worker sessions
2026-08-15 14:20:12 -03:00
jenkins
d27a9649cf
hermes: secure node access and expose live workers
2026-08-15 13:58:42 -03:00
jenkins
c7dc81c0c3
hermes: sanitize classifier tool history
2026-08-15 13:35:31 -03:00
jenkins
29eeb1ebf8
hermes: recover workers after pod restart
2026-08-15 07:07:21 -03:00
jenkins
e9b36181e4
hermes: isolate durable worker lifecycle
2026-08-15 06:31:16 -03:00
jenkins
dca4249599
hermes: recover Kanban event indexes
2026-08-15 05:37:53 -03:00
jenkins
f072685a69
hermes: resolve durable lane model ids
2026-08-15 04:07:30 -03:00
jenkins
846c890527
hermes: load tool credentials before s6
2026-08-15 03:44:00 -03:00
jenkins
f7492defdd
hermes: recover Kanban and tool execution
2026-08-15 03:35:26 -03:00
jenkins
c21203b7ea
hermes: deliver generated media to Telegram
2026-08-15 00:34:08 -03:00
jenkins
441977449e
gitea: move Atlas repositories to organization
2026-08-14 23:55:28 -03:00
jenkins
e486e53d7d
hermes: use contributor Gitea identity
2026-08-13 21:25:44 -03:00
jenkins
da1e0a8687
hermes: make Gitea askpass executable
2026-08-13 19:48:37 -03:00
