73 Commits

Author SHA1 Message Date
jenkins
ad487b5e1c fix(hermes): reuse authenticated image checkout 2026-08-23 13:58:10 -03:00
jenkins
c0b806e5d2 release(hermes): automate validated image promotion 2026-08-23 13:41:58 -03:00
Hermes Agent
99a9de936b fix: verify WebUI OCI source revision 2026-08-23 03:52:03 +00:00
Hermes Agent
735a2b240d Add reviewed Hermes WebUI release lane 2026-08-23 03:52:03 +00:00
jenkins
87f2c58e32 ci(hermes-agent-image): keep image file modes world-readable
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 22:35:18 -03:00
jenkins
baeb70e8b7 ci(hermes-agent-image): pull the base mirror inside the cluster network
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 20:44:36 -03:00
jenkins
fcbff58951 ci(hermes-agent-image): let release verification read the build evidence
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 20:32:00 -03:00
jenkins
835e9a2439 ci(hermes-agent-image): pull the reviewed base through the local mirror
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 17:29:45 -03:00
jenkins
381c3e7283 ci(hermes-agent-image): run release boundary where git exists
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-18 16:14:35 -03:00
jenkins
8036101f0b Merge remote-tracking branch 'origin/feature/hermes-review-goal-semantics' into feature/hermes-distributed-worker-pool
# Conflicts:
#	scripts/tests/test_dashboards_render_atlas_drilldowns.py
#	scripts/tests/test_dashboards_render_jobs.py
#	services/hermes/scm-common/scripts/scm_broker.py
#	services/hermes/scripts/cli_lane_dispatch.py
#	services/hermes/scripts/cli_lane_execution.py
#	testing/quality_contract.json
#	testing/tests/test_hermes_agent_access.py
#	testing/tests/test_hermes_agent_security.py
#	testing/tests/test_hermes_chat_config.py
#	testing/tests/test_hermes_chat_images.py
#	testing/tests/test_hermes_chat_provider_auth.py
#	testing/tests/test_hermes_chat_quality.py
#	testing/tests/test_hermes_chat_support.py
#	testing/tests/test_hermes_chat_voice.py
#	testing/tests/test_hermes_cli_finalization_edges.py
#	testing/tests/test_hermes_cli_foundation_coverage.py
#	testing/tests/test_hermes_cli_lanes_configuration.py
#	testing/tests/test_hermes_cli_recovery_edges.py
#	testing/tests/test_hermes_cli_retention_edges.py
#	testing/tests/test_hermes_coordinator.py
#	testing/tests/test_hermes_coordinator_boards.py
#	testing/tests/test_hermes_coordinator_support.py
2026-08-18 01:43:39 -03:00
jenkins
64272f52d2 hermes: lift remaining tracked modules to the branch floor
Exercise the mailu sync retry, attribute, and skip branches, the
listener non-object JSON path, and the hygiene conftest skip; drop the
unreachable inverted-range clamp in the semgrep report (the line helper
already floors the end line) and pin that behavior with a test. Exclude
the mailu __main__ guards from measurement.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-17 15:10:17 -03:00
Hermes Agent
7a55b259bf hermes: add the fenced three-node distributed execution pool
Three fenced worker Pods claim Hermes Kanban runs through a coordinator that
owns every state transition, with per-ordinal HMAC authority, a mediated
broker-only SCM path, and durable per-ordinal workspaces.

Content is the reviewed head of PR #18 (689bcb6e) with PR 16's and PR 19's
contributions removed: they were merged in only to validate co-existence and are
not prerequisites, so this branch no longer carries them as ancestors. Only PR 14
and PR 15 remain, because the broker boundary and the cli_lane_* decomposition
are load-bearing for two of the fixed P0 boundaries.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-17 16:31:15 +00:00
jenkins
e8c26ecf85 hermes: add daemonless agent image release lane 2026-08-17 08:25:52 -03:00
jenkins
441977449e gitea: move Atlas repositories to organization 2026-08-14 23:55:28 -03:00
jenkins
ce1b74bf1c ci: pin Trivy checks to scanner release 2026-08-13 12:48:31 -03:00
jenkins
8f45f47e60 refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
  repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00
jenkins
ad89155e48 terraform: add atlas day-zero scaffold 2026-07-16 03:25:30 -03:00
jenkins
f1b51e5d65 ci(titan-iac): observe Sonar while project gate is baselined 2026-05-21 17:56:44 -03:00
jenkins
b75af42728 ci(titan-iac): exclude privileged game-stream manifests from sonar 2026-05-21 16:28:14 -03:00
jenkins
ec8fd65030 ci(jenkins): soften agent spread constraints 2026-05-20 06:53:29 -03:00
jenkins
cd7006c7be ci: tighten agent spread and sweeper limits 2026-05-20 06:33:12 -03:00
jenkins
27b503858c ci(titan-iac): relax agent scheduling 2026-05-20 04:58:40 -03:00
jenkins
8da1bb6d53 ops: harden ci placement and gpu idle reporting 2026-05-20 04:27:26 -03:00
jenkins
615ee262e9 ci(testing): treat optional supply-chain as non-blocking 2026-05-19 19:51:10 -03:00
jenkins
7ebb56e359 ci(jenkins): avoid brittle agent nodes 2026-05-19 18:26:51 -03:00
jenkins
08a202530b ci(jenkins): tolerate missing workspace in post actions 2026-05-19 15:57:50 -03:00
jenkins
017f4cc5ea monitoring: tune testing dashboard and gate rollups 2026-05-15 14:26:06 -03:00
jenkins
f2addcd0cc monitoring(testing): show LOC compliance as positive percent 2026-05-11 17:36:13 -03:00
jenkins
87f5fa0c6f jenkins: spread ci agents and cap concurrency 2026-05-10 03:17:50 -03:00
jenkins
f64dd9a0b5 ci: avoid titan-06 for Jenkins agents 2026-05-10 02:24:40 -03:00
933fbe19df ci(titan-iac): feed coverage into sonar gate 2026-04-22 01:57:19 -03:00
ea638cefe8 ci(quality): enforce sonar and supply-chain gates 2026-04-22 01:29:54 -03:00
b9ce28819b ci(titan-iac): apply supply-chain waiver ledger 2026-04-22 00:42:03 -03:00
bd8235dc86 ci(quality): use preloaded scanner image 2026-04-21 22:50:53 -03:00
0be9bdee83 ci(quality): pass sonar token as login 2026-04-21 22:17:55 -03:00
c45dc12d10 ci(quality): run sonar and supply-chain scans 2026-04-21 22:09:06 -03:00
8888ede488 ci(quality): bind sonarqube token credential in pipelines 2026-04-21 20:16:59 -03:00
c3bd1a1d7a ci(titan-iac): lower agent cpu request 2026-04-21 18:32:45 -03:00
6c3706793c ci(titan-iac): use harbor python runner 2026-04-21 13:18:31 -03:00
jenkins
18490c3349 ci(titan-iac): use in-cluster victoria metrics dns 2026-04-21 12:30:06 -03:00
jenkins
4fc9d60fbd ci(titan-iac): harden quality metric publisher 2026-04-21 12:24:18 -03:00
jenkins
0dd67fd807 monitoring(testing): link test metrics to build artifacts 2026-04-21 11:39:13 -03:00
jenkins
5555f61427 ci(titan-iac): include primary branch in quality metrics 2026-04-21 11:08:59 -03:00
jenkins
a676a6dc13 monitoring(testing): add branch evidence panels 2026-04-21 09:35:43 -03:00
jenkins
d5bf4257b8 quality(titan-iac): widen enforced coverage contract 2026-04-20 21:39:53 -03:00
jenkins
6d2dcee81d ci(titan-iac): support direct script execution for metrics publish 2026-04-20 15:47:20 -03:00
jenkins
b98131bd7f quality(titan-iac): split metrics publisher and harden gate lint 2026-04-20 15:21:49 -03:00
jenkins
9ffff8bea2 ci(titan-iac): enforce 30d build and artifact retention 2026-04-20 12:30:57 -03:00
jenkins
197ca0e16d ci(titan-iac): emit placeholder test-case metric when junit has no cases 2026-04-20 09:10:04 -03:00
jenkins
769577cca0 ci(titan-iac): infer coverage/loc metrics from quality summary artifacts 2026-04-20 08:43:21 -03:00