91 Commits

Author SHA1 Message Date
jenkins
9e99470fef release(hermes): render one or two WebUI consumers with HUX binding
The Flux release renderer now accepts an expected-consumer set per
workload (chat may carry the HUX sidecar as a second consumer of the
exact same WebUI image) and binds HUX_IMAGE_TAG/HUX_IMAGE_DIGEST env
metadata to the released tag and digest when those fields are present.
Rendering fails when the binding fields are incomplete, keeping the
image identity single-sourced. Tests adapt to both topologies.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
2026-08-24 04:12:03 -03:00
jenkins
1eda927b71 hermes(webui): integrate trusted HUX workspace 2026-08-24 03:08:56 -03:00
jenkins
31c5eae5ae release(hermes): automate chat router image 2026-08-24 02:46:36 -03:00
jenkins
91eb4f92b7 perf(hermes): isolate rolling speech inference 2026-08-24 00:36:28 -03:00
jenkins
0dd6138d05 ci(hermes): permit WebUI test package setup 2026-08-23 23:10:26 -03:00
jenkins
817c7cebe0 ci(hermes): install WebUI voice test tools 2026-08-23 23:04:21 -03:00
jenkins
d254931a14 feat(hermes): ship full-duplex voice release 2026-08-23 22:13:52 -03:00
jenkins
1d8d466ccf ci(hermes): move WebUI builds off storage nodes 2026-08-23 20:20:29 -03:00
jenkins
80d728d4ff ci(hermes): bound voice image memory 2026-08-23 20:01:55 -03:00
jenkins
a68568d0c9 fix(hermes): version chat release assets 2026-08-23 19:22:26 -03:00
jenkins
636f3fcf93 fix(hermes): harden release reconciliation 2026-08-23 18:53:11 -03:00
jenkins
afaccbe65c ci(hermes-voice): build on roomy ARM accelerator 2026-08-23 17:53:05 -03:00
jenkins
6a55627866 ci(hermes-images): target spacious ARM builders 2026-08-23 17:03:16 -03:00
jenkins
b98a7cbe9f ci(hermes-webui): reserve image build storage 2026-08-23 16:54:10 -03:00
jenkins
589a3133f2 ci(hermes-voice): reserve image build storage 2026-08-23 16:33:17 -03:00
jenkins
5c986eabaa fix(hermes-voice): unpack Jetson image capabilities 2026-08-23 16:05:09 -03:00
jenkins
79369c2357 release(hermes): automate private voice images 2026-08-23 15:54:56 -03:00
jenkins
5b5df4ea59 fix(hermes): validate tagged WebUI releases 2026-08-23 14:27:55 -03:00
jenkins
ad487b5e1c fix(hermes): reuse authenticated image checkout 2026-08-23 13:58:10 -03:00
jenkins
c0b806e5d2 release(hermes): automate validated image promotion 2026-08-23 13:41:58 -03:00
Hermes Agent
99a9de936b fix: verify WebUI OCI source revision 2026-08-23 03:52:03 +00:00
Hermes Agent
735a2b240d Add reviewed Hermes WebUI release lane 2026-08-23 03:52:03 +00:00
jenkins
87f2c58e32 ci(hermes-agent-image): keep image file modes world-readable
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 22:35:18 -03:00
jenkins
baeb70e8b7 ci(hermes-agent-image): pull the base mirror inside the cluster network
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 20:44:36 -03:00
jenkins
fcbff58951 ci(hermes-agent-image): let release verification read the build evidence
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 20:32:00 -03:00
jenkins
835e9a2439 ci(hermes-agent-image): pull the reviewed base through the local mirror
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 17:29:45 -03:00
jenkins
381c3e7283 ci(hermes-agent-image): run release boundary where git exists
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 16:14:35 -03:00
jenkins
8036101f0b Merge remote-tracking branch 'origin/feature/hermes-review-goal-semantics' into feature/hermes-distributed-worker-pool
# Conflicts:
#	scripts/tests/test_dashboards_render_atlas_drilldowns.py
#	scripts/tests/test_dashboards_render_jobs.py
#	services/hermes/scm-common/scripts/scm_broker.py
#	services/hermes/scripts/cli_lane_dispatch.py
#	services/hermes/scripts/cli_lane_execution.py
#	testing/quality_contract.json
#	testing/tests/test_hermes_agent_access.py
#	testing/tests/test_hermes_agent_security.py
#	testing/tests/test_hermes_chat_config.py
#	testing/tests/test_hermes_chat_images.py
#	testing/tests/test_hermes_chat_provider_auth.py
#	testing/tests/test_hermes_chat_quality.py
#	testing/tests/test_hermes_chat_support.py
#	testing/tests/test_hermes_chat_voice.py
#	testing/tests/test_hermes_cli_finalization_edges.py
#	testing/tests/test_hermes_cli_foundation_coverage.py
#	testing/tests/test_hermes_cli_lanes_configuration.py
#	testing/tests/test_hermes_cli_recovery_edges.py
#	testing/tests/test_hermes_cli_retention_edges.py
#	testing/tests/test_hermes_coordinator.py
#	testing/tests/test_hermes_coordinator_boards.py
#	testing/tests/test_hermes_coordinator_support.py
2026-08-18 01:43:39 -03:00
jenkins
64272f52d2 hermes: lift remaining tracked modules to the branch floor
Exercise the mailu sync retry, attribute, and skip branches, the
listener non-object JSON path, and the hygiene conftest skip; drop the
unreachable inverted-range clamp in the semgrep report (the line helper
already floors the end line) and pin that behavior with a test. Exclude
the mailu __main__ guards from measurement.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-17 15:10:17 -03:00
Hermes Agent
7a55b259bf hermes: add the fenced three-node distributed execution pool
Three fenced worker Pods claim Hermes Kanban runs through a coordinator that
owns every state transition, with per-ordinal HMAC authority, a mediated
broker-only SCM path, and durable per-ordinal workspaces.

Content is the reviewed head of PR #18 (689bcb6e) with PR 16's and PR 19's
contributions removed: they were merged in only to validate co-existence and are
not prerequisites, so this branch no longer carries them as ancestors. Only PR 14
and PR 15 remain, because the broker boundary and the cli_lane_* decomposition
are load-bearing for two of the fixed P0 boundaries.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-17 16:31:15 +00:00
jenkins
e8c26ecf85 hermes: add daemonless agent image release lane 2026-08-17 08:25:52 -03:00
jenkins
441977449e gitea: move Atlas repositories to organization 2026-08-14 23:55:28 -03:00
jenkins
ce1b74bf1c ci: pin Trivy checks to scanner release 2026-08-13 12:48:31 -03:00
jenkins
8f45f47e60 refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
  repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00
jenkins
ad89155e48 terraform: add atlas day-zero scaffold 2026-07-16 03:25:30 -03:00
jenkins
f1b51e5d65 ci(titan-iac): observe Sonar while project gate is baselined 2026-05-21 17:56:44 -03:00
jenkins
b75af42728 ci(titan-iac): exclude privileged game-stream manifests from sonar 2026-05-21 16:28:14 -03:00
jenkins
ec8fd65030 ci(jenkins): soften agent spread constraints 2026-05-20 06:53:29 -03:00
jenkins
cd7006c7be ci: tighten agent spread and sweeper limits 2026-05-20 06:33:12 -03:00
jenkins
27b503858c ci(titan-iac): relax agent scheduling 2026-05-20 04:58:40 -03:00
jenkins
8da1bb6d53 ops: harden ci placement and gpu idle reporting 2026-05-20 04:27:26 -03:00
jenkins
615ee262e9 ci(testing): treat optional supply-chain as non-blocking 2026-05-19 19:51:10 -03:00
jenkins
7ebb56e359 ci(jenkins): avoid brittle agent nodes 2026-05-19 18:26:51 -03:00
jenkins
08a202530b ci(jenkins): tolerate missing workspace in post actions 2026-05-19 15:57:50 -03:00
jenkins
017f4cc5ea monitoring: tune testing dashboard and gate rollups 2026-05-15 14:26:06 -03:00
jenkins
f2addcd0cc monitoring(testing): show LOC compliance as positive percent 2026-05-11 17:36:13 -03:00
jenkins
87f5fa0c6f jenkins: spread ci agents and cap concurrency 2026-05-10 03:17:50 -03:00
jenkins
f64dd9a0b5 ci: avoid titan-06 for Jenkins agents 2026-05-10 02:24:40 -03:00
933fbe19df ci(titan-iac): feed coverage into sonar gate 2026-04-22 01:57:19 -03:00
ea638cefe8 ci(quality): enforce sonar and supply-chain gates 2026-04-22 01:29:54 -03:00