jenkins
8036101f0b
Merge remote-tracking branch 'origin/feature/hermes-review-goal-semantics' into feature/hermes-distributed-worker-pool
...
# Conflicts:
# scripts/tests/test_dashboards_render_atlas_drilldowns.py
# scripts/tests/test_dashboards_render_jobs.py
# services/hermes/scm-common/scripts/scm_broker.py
# services/hermes/scripts/cli_lane_dispatch.py
# services/hermes/scripts/cli_lane_execution.py
# testing/quality_contract.json
# testing/tests/test_hermes_agent_access.py
# testing/tests/test_hermes_agent_security.py
# testing/tests/test_hermes_chat_config.py
# testing/tests/test_hermes_chat_images.py
# testing/tests/test_hermes_chat_provider_auth.py
# testing/tests/test_hermes_chat_quality.py
# testing/tests/test_hermes_chat_support.py
# testing/tests/test_hermes_chat_voice.py
# testing/tests/test_hermes_cli_finalization_edges.py
# testing/tests/test_hermes_cli_foundation_coverage.py
# testing/tests/test_hermes_cli_lanes_configuration.py
# testing/tests/test_hermes_cli_recovery_edges.py
# testing/tests/test_hermes_cli_retention_edges.py
# testing/tests/test_hermes_coordinator.py
# testing/tests/test_hermes_coordinator_boards.py
# testing/tests/test_hermes_coordinator_support.py
2026-08-18 01:43:39 -03:00
jenkins
9d42ff33f5
Merge origin/main ( #16 image-builder) into hermes-safe-gitea-pr
...
Resolve 8 conflicts, uniting #16 's daemonless image-release lane with
#14 's SCM broker + node-audit boundary. Nothing dropped from either side.
- quality_coverage.py / test_quality_coverage_helpers.py: take main's
dual-metric gate (line+branch enforced per file at minimum_percent);
drop #14 's now-dead branch_tracked_files/minimum_branch_percent keys.
- quality_contract.json: union all lists (managed_modules, lint_paths,
coverage_sources, tracked_files, hygiene globs) so #14 's scm-broker,
git_pack_objects, receive_pack_scan, deadline_http and node_polkit_audit
are branch-checked alongside #16 's image-builder modules.
- Vault auth (vault_k8s_auth_configure.sh): coexist both role sets. Keep
#16 's hermes-switchyard split + hermes-jenkins-token-seed; keep #14 's
hermes-scm-broker role. Preserve #14 's security property: hermes-agent
no longer holds developer-gitea (broker role carries it).
- agent-deployment.yaml / stage_runtime_access.py: keep #16 's
jenkins-image-build-token injection/staging; keep #14 's removal of the
agent's gitea-token/gitea-username.
- Bump vault-k8s-auth-hermes job -9 -> -10 (and its health check + test)
so the merged auth config re-applies over any -9 already in-cluster.
- flux hermes dependsOn: union jenkins + hermes-scm-broker + observer-rbac.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-17 21:07:06 -03:00
Hermes Agent
7a55b259bf
hermes: add the fenced three-node distributed execution pool
...
Three fenced worker Pods claim Hermes Kanban runs through a coordinator that
owns every state transition, with per-ordinal HMAC authority, a mediated
broker-only SCM path, and durable per-ordinal workspaces.
Content is the reviewed head of PR #18 (689bcb6e) with PR 16's and PR 19's
contributions removed: they were merged in only to validate co-existence and are
not prerequisites, so this branch no longer carries them as ancestors. Only PR 14
and PR 15 remain, because the broker boundary and the cli_lane_* decomposition
are load-bearing for two of the fixed P0 boundaries.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-17 16:31:15 +00:00
jenkins
e8c26ecf85
hermes: add daemonless agent image release lane
2026-08-17 08:25:52 -03:00
jenkins
8c6e3acdac
hermes: isolate Atlas SCM write authority
2026-08-17 07:58:44 -03:00
jenkins
762784da6b
hermes: bound Atlas pull request client
2026-08-17 07:22:26 -03:00
jenkins
46f37f32a3
hermes: streamline forge evidence tools
2026-08-16 08:21:33 -03:00
jenkins
c7ac16d206
hermes: harden Atlas forge workflow
2026-08-16 07:59:35 -03:00
jenkins
89b9f1a4c7
hermes: isolate runtime access and expose activity
2026-08-15 22:15:40 -03:00
