titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity
5,725 Commits 81 Branches 0 Tags
Commit Graph

5301 Commits

Author SHA1 Message Date
jenkins
71c05cf9c0 hermes(chat): stage HUX sidecar activation topology 
Activation (not yet pushed): per-tenant HUX sidecar on the exact live
WebUI image, standalone Astreae RWX PVC with kubelet subPathExpr
per-pod isolation, root init container that provisions 0700 tenant
roots, a persistent HMAC context key, an immutable subject binding and
tmpfs relay/worker keys, the vendored hux-runtime plugin ConfigMap, and
observe-only defaults (HUX_TOOL_ENFORCEMENT=0). Delivery tests pin the
whole boundary; image-automation tests bind the HUX metadata setters.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
 2026-08-24 04:12:03 -03:00
jenkins
bd63b568e1 security(hermes): strip inbound X-Hux-* at the router boundary 
Defense in depth: the tenant router deletes every browser-supplied
X-Hux-* header before asserting its own HUX identity headers, so no
client can forge subject, trust class, or relay key. Regression covers
X-Hux-Subject, X-Hux-Trust and X-Hux-Relay-Key forgeries.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
 2026-08-24 04:12:03 -03:00
jenkins
47165274f0 security(hermes): isolate HUX release evidence trust 2026-08-24 03:10:13 -03:00
jenkins
31c5eae5ae release(hermes): automate chat router image 2026-08-24 02:46:36 -03:00
jenkins
53d7c2c586 feat(hermes): complete HUX backend families 2026-08-24 02:28:45 -03:00
jenkins
a1070449a7 fix(hermes): vendor HUX runtime hooks 2026-08-24 02:23:04 -03:00
jenkins
438180a99f feat(hermes): gate tool runtime through HUX 2026-08-24 02:17:04 -03:00
jenkins
964103f02b merge(hermes): integrate hardened HUX foundation 2026-08-24 02:01:08 -03:00
flux-bot
5558c24f86 chore(hermes): promote validated image release 2026-08-24 04:48:04 +00:00
flux-bot
a23cf838b2 chore(hermes): promote validated image release 2026-08-24 04:24:04 +00:00
jenkins
3c06ae867b fix(hermes): reject invalid release revisions early 2026-08-24 01:19:58 -03:00
flux-bot
33de8e38fe chore(hermes): promote validated image release 2026-08-24 04:05:59 +00:00
jenkins
6964a9d8c8 hermes(hux): close Wave A review findings in autonomy and the HTTP pipeline 
F1 policy writes and allow grants are human-surface only; F2 worker trust is
confined to the hook allowlist and unexpected exceptions become audited 500
error records; F4 external side effects release only for the same run and
argument hash; F6 the gate honours budget exhaustion; F8 only the gateway
can vouch for an empty process registry and failed receipts can be
superseded; F11/F12 receipt revision and unshipped card routes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
 2026-08-24 00:48:20 -03:00
jenkins
1b1a14e972 hermes(hux): contract 1.1.0 additive revision and Wave A consolidation 
Adds receipt evidence kind, 422 unprocessable, optional revision on research
records, audit_stale on the privacy policy, per-route body caps (25 MiB
artifact uploads), promotion checks the project exists, memory rules skip
content-free statuses. Handoff ledger covers every Wave A card.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
 2026-08-24 00:48:20 -03:00
jenkins
b4145861d2 hermes(hux): freeze hux.v1 contract 1.0.0 and move reference modules into the foundation package 
HUX-11 contract freeze: identity/capabilities/manifest/error records, event turn
and idempotency and delegation/side-effect kinds, memory no-store/supersedes/
retrieval removal, revisions for optimistic concurrency, artifact access,
budget scope/spend/subagents and external side-effect gating, notebook notes and
dedupe keys. ADR-0001 records the wire and compatibility rules.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
 2026-08-24 00:48:20 -03:00
flux-bot
1a586d9523 chore(hermes): promote validated image release 2026-08-24 03:43:01 +00:00
flux-bot
c7aa7f462b chore(hermes): promote validated image release 2026-08-24 03:11:53 +00:00
flux-bot
70d797deb3 chore(hermes): promote validated image release 2026-08-24 02:27:52 +00:00
flux-bot
9aed543dd3 chore(maintenance): automated image update 2026-08-24 01:50:51 +00:00
flux-bot
19eadc9556 chore(hermes): promote validated image release 2026-08-24 01:50:42 +00:00
flux-bot
30fff866d1 chore(maintenance): automated image update 2026-08-24 01:49:48 +00:00
flux-bot
66d09ec920 chore(maintenance): automated image update 2026-08-24 01:46:50 +00:00
flux-bot
807dd7c093 chore(maintenance): automated image update 2026-08-24 01:41:46 +00:00
flux-bot
fb0ae53b26 chore(hermes): promote validated image release 2026-08-24 01:38:43 +00:00
jenkins
d3cb6e9045 hermes(hux): add contract-only foundation for the chat UX program 
Schemas, examples and a flag registry for the twelve HUX cards, a dependency-free
validator, the governance rules (memory ledger, autonomy matrix, friendly modes
mapped to real Switchyard routes, privacy defaults, suggestion gating, release
state machine) and the contract doc UI work codes against.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
 2026-08-23 22:30:41 -03:00
jenkins
d254931a14 feat(hermes): ship full-duplex voice release 2026-08-23 22:13:52 -03:00
flux-bot
d3cbeb06c3 chore(hermes): promote validated image release 2026-08-23 23:39:07 +00:00
flux-bot
dbb0bf542e chore(hermes): promote validated image release 2026-08-23 23:24:33 +00:00
flux-bot
ccbb459dc4 chore(hermes): promote validated image release 2026-08-23 22:40:52 +00:00
flux-bot
55e21c9e08 chore(hermes): promote validated image release 2026-08-23 22:08:29 +00:00
jenkins
636f3fcf93 fix(hermes): harden release reconciliation 2026-08-23 18:53:11 -03:00
jenkins
708d611101 feat(hermes): stream hands-free voice turns 2026-08-23 18:29:12 -03:00
jenkins
45ab125692 fix(hermes): skip completed startup migration 2026-08-23 18:20:08 -03:00
flux-bot
0fab341263 chore(hermes): promote validated image release 2026-08-23 21:04:22 +00:00
jenkins
33c6f187b3 fix(hermes): recognize containerd release images
Some checks failed
Tests / Declarative: Post Actions failed: 49, skipped: 19, passed: 2816
Details
2026-08-23 17:23:51 -03:00
jenkins
b87f33530b feat(hermes): brand chat and prove image rollout 2026-08-23 17:13:14 -03:00
flux-bot
ddc46aa845 chore(hermes): promote validated image release 2026-08-23 20:12:17 +00:00
flux-bot
cb5cf6ea12 chore(hermes): promote validated image release 2026-08-23 19:41:44 +00:00
jenkins
1a3e7f39f5 fix(jenkins): keep voice concurrency in pipeline 2026-08-23 16:21:19 -03:00
jenkins
5c986eabaa fix(hermes-voice): unpack Jetson image capabilities 2026-08-23 16:05:09 -03:00
jenkins
ef32843a76 fix(hermes-voice): finalize mobile audio and reduce latency 2026-08-23 15:59:43 -03:00
jenkins
79369c2357 release(hermes): automate private voice images 2026-08-23 15:54:56 -03:00
flux-bot
df18acbfa7 chore(hermes): promote validated image release 2026-08-23 18:35:22 +00:00
jenkins
225793facd fix(mailu): self-heal mailbox lock failures 2026-08-23 14:50:02 -03:00
jenkins
8d9b75a28c fix(hermes): retain full automated image refs 2026-08-23 14:22:26 -03:00
flux-bot
0da2483dd3 chore(hermes): promote validated image release 2026-08-23 17:20:01 +00:00
jenkins
41233f94a9 fix(jenkins): persist Hermes release parameters 2026-08-23 13:53:21 -03:00
jenkins
c0b806e5d2 release(hermes): automate validated image promotion 2026-08-23 13:41:58 -03:00
jenkins
17c5f5093a placement(quality): use titan-22 spare capacity 2026-08-23 11:50:39 -03:00
jenkins
42795f3d61 cleanup(hermes): remove Veles observer binding 2026-08-23 11:41:33 -03:00