titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

WIP: hermes-next HUX backend (contract 1.0.0, foundation, Wave A lanes) #55

Draft
hermes-automation wants to merge 0 commits from feature/hermes-next-hux into main
pull from: feature/hermes-next-hux
merge into: titan:main
Conversation 0 Commits - Files Changed -
hermes-automation commented 2026-08-24 03:13:26 +00:00
Member
Copy Link

Draft, do not merge. Claude backend increments for the hermes-next program (HUX-11 foundation + HUX-01/02/03/04/05/08/10 backends). Ledger: docs/hux/HANDOFF.md. Contract: services/hermes/contracts/hux (1.0.0, ADR-0001). Threat model docs/hux/THREAT-MODEL.md. Codex/root owns image/manifests/NetworkPolicy/router headers/Flux; see HANDOFF.md 'Codex needs' per card.

Draft, do not merge. Claude backend increments for the hermes-next program (HUX-11 foundation + HUX-01/02/03/04/05/08/10 backends). Ledger: docs/hux/HANDOFF.md. Contract: services/hermes/contracts/hux (1.0.0, ADR-0001). Threat model docs/hux/THREAT-MODEL.md. Codex/root owns image/manifests/NetworkPolicy/router headers/Flux; see HANDOFF.md 'Codex needs' per card.
hermes-automation added 3 commits 2026-08-24 03:13:27 +00:00 
HUX-11 contract freeze: identity/capabilities/manifest/error records, event turn
and idempotency and delegation/side-effect kinds, memory no-store/supersedes/
retrieval removal, revisions for optimistic concurrency, artifact access,
budget scope/spend/subagents and external side-effect gating, notebook notes and
dedupe keys. ADR-0001 records the wire and compatibility rules.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
Stdlib per-tenant service: trusted-header identity (router/relay/worker,
constant-time keys, slot pinned to the pod), fail-closed card flags with
capability negotiation, tenant-scoped store (atomic writes, revisions,
append-only ledgers, content-addressed blobs, manifest), audit outcome for
every request, and the /hux/v1 pipeline that maps errors to hux.error.v1.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
bstein added 5 commits 2026-08-24 03:27:41 +00:00 
Immutable content-addressed artifact versions with If-Match, lineage that must
resolve under the caller, unified diffs, promotion; sources/passages/citations
with server-side hashing and dedupe, citation integrity checks and revisioned
research notebooks. Cross-tenant access is 404 and audited.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
Scoped policies resolved through the single capability matrix, grants with
server-set expiry, approval queue with once/session/always/deny, pre-side-effect
gate that releases a once approval exactly once against the argument hash,
run budgets with exhaustion events, honest cancellation receipts; projects,
conversations, branch lineage and search over the indexed fields.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
Per-conversation monotonic event ledger with idempotent emit, SSE replay from
Last-Event-ID, per-kind detail allowlists and secret scrubbing, surface-aware
serve-time redaction; memory as an append-only ledger with no-store,
supersede, forget and retrieval tombstones so 'do not remember' blocks both
persistence and retrieval; sensitive-topic scoping, notices, conversation
forget and a retention job that never touches audit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
Adds receipt evidence kind, 422 unprocessable, optional revision on research
records, audit_stale on the privacy policy, per-route body caps (25 MiB
artifact uploads), promotion checks the project exists, memory rules skip
content-free statuses. Handoff ledger covers every Wave A card.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
bstein force-pushed feature/hermes-next-hux from 124206b748 to e1ef110c8a 2026-08-24 03:48:59 +00:00 Compare
bstein added 1 commit 2026-08-24 03:54:36 +00:00 
GET /hux/v1/conversations/{id}/privacy reports forgotten, memory_disabled,
topics, mode and memory_writes_allowed; the worker hook's memory gate reads it
and fails closed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RNPhwu2bsaRNg3DETSAZoM
bstein added 1 commit 2026-08-24 03:54:51 +00:00
This pull request is marked as a work in progress.
This branch is out-of-date with the base branch
View command line instructions.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feature/hermes-next-hux:feature/hermes-next-hux
git checkout feature/hermes-next-hux
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
atlas-reconciler bstein hermes-automation
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: titan/atlas-iac#55
No description provided.
Delete Branch "feature/hermes-next-hux"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?