atlas-iac/testing/quality_contract.json
jenkins 469e52fd20 hermes(hux): add the HUX-12 release evidence producer
A companion package (outside the network-free hux/ service package)
that independently verifies and binds the whole release chain before
any transition: reviewed proposal URL, Jenkins job/build/result and
revision, immutable Harbor tag/digest equality, Flux kustomization and
applied revision with pin containment, desired workload image, every
Ready pod imageID, bounded-age health receipt, and rollback target.
Pure injectable verifier core, HTTPS-only collectors (SA token for the
Kubernetes API), and an evidence-trust driver that posts exactly one
If-Match transition with deterministic idempotency. Rejects stale,
replayed, downgraded, incomplete, cross-workload, mismatched, and
self-asserted evidence. 100% line and branch coverage (71 tests).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BvMSXH8VH2tMWXanb8SJdf
2026-08-24 04:35:12 -03:00

581 lines
26 KiB
JSON

{
"required_docs": [
{
"path": "README.md",
"description": "Top-level repository handbook."
},
{
"path": "Jenkinsfile",
"description": "Top-level Jenkins mirror for multibranch discovery."
},
{
"path": "ci/Jenkinsfile.titan-iac",
"description": "Canonical titan-iac Jenkins pipeline definition."
}
],
"managed_modules": [
"ci/scripts/hermes_image_release.py",
"dockerfiles/hermes-kaniko-heredoc-runner.py",
"services/harbor/scripts/harbor_hermes_agent_immutability_ensure.py",
"services/hermes/scripts/hermes_image_release_status.py",
"services/hermes/scripts/voice_route_preflight.py",
"services/hermes/scripts/jenkins_image_build_trigger.py",
"ci/scripts/publish_test_metrics.py",
"ci/scripts/publish_test_metrics_quality.py",
"ci/scripts/semgrep_report.py",
"ci/scripts/supply_chain_report.py",
"services/mailu/scripts/mailu_sync.py",
"services/mailu/scripts/mailu_sync_listener.py",
"services/hermes/scripts/cli_lane_board.py",
"services/hermes/scripts/cli_lane_capabilities.py",
"services/hermes/scripts/cli_lane_config.py",
"services/hermes/scripts/cli_lane_dispatch.py",
"services/hermes/scripts/cli_lane_evidence.py",
"services/hermes/scripts/cli_lane_execution.py",
"services/hermes/scripts/cli_lane_failover.py",
"services/hermes/scripts/cli_lane_files.py",
"services/hermes/scripts/cli_lane_finalization.py",
"services/hermes/scripts/cli_lane_goal.py",
"services/hermes/scripts/cli_lane_health.py",
"services/hermes/scripts/cli_lane_metrics.py",
"services/hermes/scripts/cli_lane_prompt.py",
"services/hermes/scripts/cli_lane_provider.py",
"services/hermes/scripts/cli_lane_quarantine.py",
"services/hermes/scripts/cli_lane_quota.py",
"services/hermes/scripts/cli_lane_records.py",
"services/hermes/scripts/cli_lane_recovery.py",
"services/hermes/scripts/cli_lane_retention.py",
"services/hermes/scripts/cli_lane_routing.py",
"services/hermes/scripts/cli_lane_runner.py",
"services/hermes/scripts/kanban_supervisor.py",
"services/hermes/scripts/supervisor_policy.py",
"testing/__init__.py",
"testing/quality_contract.py",
"testing/quality_docs.py",
"testing/quality_hygiene.py",
"testing/quality_coverage.py",
"testing/quality_gate.py",
"ci/tests/glue/test_ariadne_schedules.py",
"ci/tests/glue/test_glue_metrics.py",
"testing/tests/test_publish_test_metrics.py",
"testing/tests/test_supply_chain_report.py",
"testing/tests/test_semgrep_report.py",
"testing/tests/test_quality_contract.py",
"testing/tests/test_quality_gate.py",
"services/gitea/scripts/gitea_branch_protection_check.py",
"services/hermes/scm-common/scripts/gitea_api.py",
"services/hermes/scm-common/scripts/gitea_api_policy.py",
"services/hermes/scm-common/scripts/scm_broker.py",
"services/hermes/scm-common/scripts/scm_broker_client.py",
"services/hermes/scm-common/scripts/scm_broker_io.py",
"services/hermes/scm-common/scripts/scm_broker_server.py",
"services/hermes/scripts/execution_pool_client.py",
"services/hermes/scripts/execution_pool_coordinator.py",
"services/hermes/scripts/execution_pool_maintenance.py",
"services/hermes/scripts/execution_pool_project.py",
"services/hermes/scripts/execution_pool_protocol.py",
"services/hermes/scripts/execution_pool_scm.py",
"services/hermes/scripts/execution_pool_server.py",
"services/hermes/scripts/execution_pool_store.py",
"services/hermes/scripts/execution_pool_worker.py",
"services/hermes/scripts/hermes_coordinator.py",
"services/hermes/scripts/node_account_audit.py",
"services/hermes/scripts/node_account_hardening.py",
"services/hermes/scripts/node_account_io.py",
"services/hermes/scripts/stage_runtime_access.py",
"services/hermes/scm-common/scripts/deadline_http.py",
"services/hermes/scm-common/scripts/git_pack_objects.py",
"services/hermes/scm-common/scripts/receive_pack_scan.py",
"services/hermes/scripts/node_polkit_audit.py",
"scripts/ops/hermes_handoff_acceptance.py",
"scripts/ops/hermes_handoff_arming.py",
"scripts/ops/hermes_handoff_catalog.py",
"scripts/ops/hermes_handoff_checks_access.py",
"scripts/ops/hermes_handoff_checks_delivery.py",
"scripts/ops/hermes_handoff_checks_platform.py",
"scripts/ops/hermes_handoff_checks_workers.py",
"scripts/ops/hermes_handoff_ephemeral.py",
"scripts/ops/hermes_handoff_evaluators.py",
"scripts/ops/hermes_handoff_exec.py",
"scripts/ops/hermes_handoff_json_rules.py",
"scripts/ops/hermes_handoff_model.py",
"scripts/ops/hermes_handoff_policy.py",
"scripts/ops/hermes_handoff_redaction.py",
"scripts/ops/hermes_handoff_rules.py",
"scripts/ops/hermes_handoff_run.py",
"testing/quality_handoff_mutation.py",
"dockerfiles/hermes-hux-foundation/hux/__init__.py",
"dockerfiles/hermes-hux-foundation/hux/artifacts.py",
"dockerfiles/hermes-hux-foundation/hux/audit.py",
"dockerfiles/hermes-hux-foundation/hux/budgets.py",
"dockerfiles/hermes-hux-foundation/hux/contracts.py",
"dockerfiles/hermes-hux-foundation/hux/diffs.py",
"dockerfiles/hermes-hux-foundation/hux/errors.py",
"dockerfiles/hermes-hux-foundation/hux/events.py",
"dockerfiles/hermes-hux-foundation/hux/flags.py",
"dockerfiles/hermes-hux-foundation/hux/foundation.py",
"dockerfiles/hermes-hux-foundation/hux/http.py",
"dockerfiles/hermes-hux-foundation/hux/identity.py",
"dockerfiles/hermes-hux-foundation/hux/memory.py",
"dockerfiles/hermes-hux-foundation/hux/modes.py",
"dockerfiles/hermes-hux-foundation/hux/multimodal.py",
"dockerfiles/hermes-hux-foundation/hux/organization.py",
"dockerfiles/hermes-hux-foundation/hux/policy.py",
"dockerfiles/hermes-hux-foundation/hux/privacy.py",
"dockerfiles/hermes-hux-foundation/hux/redaction.py",
"dockerfiles/hermes-hux-foundation/hux/releases.py",
"dockerfiles/hermes-hux-foundation/hux/release_security.py",
"dockerfiles/hermes-hux-foundation/hux/retention_scheduler.py",
"dockerfiles/hermes-hux-foundation/hux/research.py",
"dockerfiles/hermes-hux-foundation/hux/rules.py",
"dockerfiles/hermes-hux-foundation/hux/server.py",
"dockerfiles/hermes-hux-foundation/hux/store.py",
"dockerfiles/hermes-hux-foundation/hux/suggestions.py",
"dockerfiles/hermes-hux-foundation/hux_producer/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/client.py",
"dockerfiles/hermes-worker-hux/hux_hook/hooks.py",
"services/hermes/plugins/auto-router/hux_mode.py",
"services/hermes/plugins/hux-runtime/__init__.py",
"services/hermes/plugins/hux-runtime/context_ids.py",
"services/hermes/plugins/hux-runtime/emitters.py",
"services/hermes/plugins/hux-runtime/runtime.py",
"services/hermes/plugins/hux-runtime/tool_policy.py"
],
"lint_paths": [
"ci/scripts/hermes_image_release.py",
"dockerfiles/hermes-kaniko-heredoc-runner.py",
"services/harbor/scripts/harbor_hermes_agent_immutability_ensure.py",
"services/hermes/scripts/hermes_image_release_status.py",
"services/hermes/scripts/voice_route_preflight.py",
"services/hermes/scripts/jenkins_image_build_trigger.py",
"ci/scripts/publish_test_metrics.py",
"ci/scripts/publish_test_metrics_quality.py",
"ci/scripts/semgrep_report.py",
"ci/tests/glue",
"scripts/tests",
"services/comms/scripts/tests",
"services/mailu/scripts/mailu_sync.py",
"services/mailu/scripts/mailu_sync_listener.py",
"services/hermes/scripts/cli_lane_board.py",
"services/hermes/scripts/cli_lane_capabilities.py",
"services/hermes/scripts/cli_lane_config.py",
"services/hermes/scripts/cli_lane_dispatch.py",
"services/hermes/scripts/cli_lane_evidence.py",
"services/hermes/scripts/cli_lane_execution.py",
"services/hermes/scripts/cli_lane_failover.py",
"services/hermes/scripts/cli_lane_files.py",
"services/hermes/scripts/cli_lane_finalization.py",
"services/hermes/scripts/cli_lane_goal.py",
"services/hermes/scripts/cli_lane_health.py",
"services/hermes/scripts/cli_lane_metrics.py",
"services/hermes/scripts/cli_lane_prompt.py",
"services/hermes/scripts/cli_lane_provider.py",
"services/hermes/scripts/cli_lane_quarantine.py",
"services/hermes/scripts/cli_lane_quota.py",
"services/hermes/scripts/cli_lane_records.py",
"services/hermes/scripts/cli_lane_recovery.py",
"services/hermes/scripts/cli_lane_retention.py",
"services/hermes/scripts/cli_lane_routing.py",
"services/hermes/scripts/cli_lane_runner.py",
"services/hermes/scripts/kanban_supervisor.py",
"services/hermes/scripts/supervisor_policy.py",
"testing/tests",
"testing",
"services/gitea/scripts/gitea_branch_protection_check.py",
"services/hermes/scm-common/scripts",
"services/hermes/scripts/execution_pool_client.py",
"services/hermes/scripts/execution_pool_coordinator.py",
"services/hermes/scripts/execution_pool_maintenance.py",
"services/hermes/scripts/execution_pool_project.py",
"services/hermes/scripts/execution_pool_protocol.py",
"services/hermes/scripts/execution_pool_scm.py",
"services/hermes/scripts/execution_pool_server.py",
"services/hermes/scripts/execution_pool_store.py",
"services/hermes/scripts/execution_pool_worker.py",
"services/hermes/scripts/hermes_coordinator.py",
"services/hermes/scripts/node_account_audit.py",
"services/hermes/scripts/node_account_hardening.py",
"services/hermes/scripts/node_account_io.py",
"services/hermes/scripts/stage_runtime_access.py",
"services/hermes/scripts/node_polkit_audit.py",
"scripts/ops/hermes_handoff_acceptance.py",
"scripts/ops/hermes_handoff_arming.py",
"scripts/ops/hermes_handoff_catalog.py",
"scripts/ops/hermes_handoff_checks_access.py",
"scripts/ops/hermes_handoff_checks_delivery.py",
"scripts/ops/hermes_handoff_checks_platform.py",
"scripts/ops/hermes_handoff_checks_workers.py",
"scripts/ops/hermes_handoff_ephemeral.py",
"scripts/ops/hermes_handoff_evaluators.py",
"scripts/ops/hermes_handoff_exec.py",
"scripts/ops/hermes_handoff_json_rules.py",
"scripts/ops/hermes_handoff_model.py",
"scripts/ops/hermes_handoff_policy.py",
"scripts/ops/hermes_handoff_redaction.py",
"scripts/ops/hermes_handoff_rules.py",
"scripts/ops/hermes_handoff_run.py",
"dockerfiles/hermes-hux-foundation/hux/__init__.py",
"dockerfiles/hermes-hux-foundation/hux/artifacts.py",
"dockerfiles/hermes-hux-foundation/hux/audit.py",
"dockerfiles/hermes-hux-foundation/hux/budgets.py",
"dockerfiles/hermes-hux-foundation/hux/contracts.py",
"dockerfiles/hermes-hux-foundation/hux/diffs.py",
"dockerfiles/hermes-hux-foundation/hux/errors.py",
"dockerfiles/hermes-hux-foundation/hux/events.py",
"dockerfiles/hermes-hux-foundation/hux/flags.py",
"dockerfiles/hermes-hux-foundation/hux/foundation.py",
"dockerfiles/hermes-hux-foundation/hux/http.py",
"dockerfiles/hermes-hux-foundation/hux/identity.py",
"dockerfiles/hermes-hux-foundation/hux/memory.py",
"dockerfiles/hermes-hux-foundation/hux/modes.py",
"dockerfiles/hermes-hux-foundation/hux/multimodal.py",
"dockerfiles/hermes-hux-foundation/hux/organization.py",
"dockerfiles/hermes-hux-foundation/hux/policy.py",
"dockerfiles/hermes-hux-foundation/hux/privacy.py",
"dockerfiles/hermes-hux-foundation/hux/redaction.py",
"dockerfiles/hermes-hux-foundation/hux/releases.py",
"dockerfiles/hermes-hux-foundation/hux/release_security.py",
"dockerfiles/hermes-hux-foundation/hux/retention_scheduler.py",
"dockerfiles/hermes-hux-foundation/hux/research.py",
"dockerfiles/hermes-hux-foundation/hux/rules.py",
"dockerfiles/hermes-hux-foundation/hux/server.py",
"dockerfiles/hermes-hux-foundation/hux/store.py",
"dockerfiles/hermes-hux-foundation/hux/suggestions.py",
"dockerfiles/hermes-hux-foundation/hux_producer/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/client.py",
"dockerfiles/hermes-worker-hux/hux_hook/hooks.py",
"services/hermes/plugins/auto-router/hux_mode.py",
"services/hermes/plugins/hux-runtime/__init__.py",
"services/hermes/plugins/hux-runtime/context_ids.py",
"services/hermes/plugins/hux-runtime/emitters.py",
"services/hermes/plugins/hux-runtime/runtime.py",
"services/hermes/plugins/hux-runtime/tool_policy.py"
],
"pytest_suites": {
"unit": {
"description": "Fast unit and contract tests for repo automation.",
"paths": [
"scripts/tests",
"services/comms/scripts/tests",
"testing/tests"
],
"junit": "build/junit-unit.xml",
"coverage_sources": [
"ci/scripts",
"dockerfiles",
"scripts.render.dashboards_render_atlas",
"services/harbor/scripts",
"services/hermes/scripts",
"services/mailu/scripts",
"testing",
"services/gitea/scripts",
"services/hermes/scm-common/scripts",
"scripts/ops"
],
"coverage_xml": "build/coverage-unit.xml"
},
"glue": {
"description": "Cluster-live glue checks that validate CronJobs and exported metrics.",
"paths": [
"ci/tests/glue"
],
"junit": "build/junit-glue.xml"
}
},
"profiles": {
"local": [
"docs",
"smell",
"hygiene",
"unit",
"coverage"
],
"jenkins": [
"docs",
"smell",
"hygiene",
"unit",
"coverage",
"sonarqube",
"ironbank",
"glue"
]
},
"manual_scripts": [
{
"path": "scripts/manual-tests/test_atlas_user_cleanup.py",
"description": "Manual cleanup validation for Atlas user lifecycle automation."
},
{
"path": "scripts/manual-tests/test_user_cleanup.py",
"description": "Manual cleanup validation for shared user lifecycle automation."
},
{
"path": "scripts/manual-tests/test_vaultwarden_user_cleanup.py",
"description": "Manual cleanup validation for Vaultwarden user lifecycle automation."
},
{
"path": "services/bstein-dev-home/scripts/test_portal_onboarding_flow.py",
"description": "Portal onboarding end-to-end flow validation with mail delivery checks."
},
{
"path": "services/keycloak/scripts/tests/test_keycloak_execute_actions_email.py",
"description": "Standalone Keycloak SMTP execute-actions-email validation script."
},
{
"path": "services/keycloak/scripts/tests/test_portal_token_exchange.py",
"description": "Standalone Keycloak token-exchange validation script."
}
],
"hygiene": {
"max_lines": 500,
"line_limit_globs": [
"testing/**/*.py",
"ci/scripts/*.py",
"ci/tests/**/*.py",
"scripts/tests/**/*.py",
"services/*/scripts/tests/**/*.py",
"services/hermes/scripts/cli_lane_*.py",
"services/hermes/scripts/kanban_supervisor.py",
"services/hermes/scripts/supervisor_policy.py",
"services/mailu/scripts/mailu_sync.py",
"services/mailu/scripts/mailu_sync_listener.py",
"services/gitea/scripts/gitea_branch_protection_check.py",
"services/hermes/scm-common/scripts/*.py",
"services/hermes/scripts/execution_pool_*.py",
"services/hermes/scripts/hermes_coordinator.py",
"services/hermes/scripts/node_account_audit.py",
"services/hermes/scripts/node_account_hardening.py",
"services/hermes/scripts/node_account_io.py",
"services/hermes/scripts/stage_runtime_access.py",
"services/hermes/scripts/node_polkit_audit.py",
"scripts/ops/hermes_handoff_*.py",
"dockerfiles/hermes-hux-foundation/hux/*.py",
"dockerfiles/hermes-worker-hux/hux_hook/*.py"
],
"naming_rules": [
{
"glob": "testing/*.py",
"pattern": "^(?:__init__|quality_[a-z0-9_]+)\\.py$",
"description": "Top-level testing helpers use quality_* module names."
},
{
"glob": "testing/tests/*.py",
"pattern": "^test_[a-z0-9_]+\\.py$",
"description": "Top-level pytest files use test_*.py names."
},
{
"glob": "ci/tests/**/*.py",
"pattern": "^test_[a-z0-9_]+\\.py$",
"description": "CI pytest files use test_*.py names."
},
{
"glob": "scripts/tests/**/*.py",
"pattern": "^test_[a-z0-9_]+\\.py$",
"description": "Script pytest files use test_*.py names."
},
{
"glob": "scripts/test_*.py",
"pattern": "^test_[a-z0-9_]+\\.py$",
"description": "Standalone script tests use test_*.py names."
},
{
"glob": "services/*/scripts/tests/**/*.py",
"pattern": "^test_[a-z0-9_]+\\.py$",
"description": "Service pytest files use test_*.py names."
},
{
"glob": "services/*/scripts/test_*.py",
"pattern": "^test_[a-z0-9_]+\\.py$",
"description": "Standalone service test scripts use test_*.py names."
}
]
},
"coverage": {
"minimum_percent": 95.0,
"minimum_branch_percent": 95.0,
"branch_tracked_files": [
"services/hermes/scripts/voice_route_preflight.py",
"scripts/ops/hermes_handoff_acceptance.py",
"scripts/ops/hermes_handoff_arming.py",
"scripts/ops/hermes_handoff_catalog.py",
"scripts/ops/hermes_handoff_checks_access.py",
"scripts/ops/hermes_handoff_checks_delivery.py",
"scripts/ops/hermes_handoff_checks_platform.py",
"scripts/ops/hermes_handoff_checks_workers.py",
"scripts/ops/hermes_handoff_ephemeral.py",
"scripts/ops/hermes_handoff_evaluators.py",
"scripts/ops/hermes_handoff_exec.py",
"scripts/ops/hermes_handoff_json_rules.py",
"scripts/ops/hermes_handoff_model.py",
"scripts/ops/hermes_handoff_policy.py",
"scripts/ops/hermes_handoff_redaction.py",
"scripts/ops/hermes_handoff_rules.py",
"scripts/ops/hermes_handoff_run.py",
"ci/scripts/semgrep_report.py",
"testing/quality_coverage.py",
"testing/quality_handoff_mutation.py",
"dockerfiles/hermes-hux-foundation/hux/__init__.py",
"dockerfiles/hermes-hux-foundation/hux/artifacts.py",
"dockerfiles/hermes-hux-foundation/hux/audit.py",
"dockerfiles/hermes-hux-foundation/hux/budgets.py",
"dockerfiles/hermes-hux-foundation/hux/contracts.py",
"dockerfiles/hermes-hux-foundation/hux/diffs.py",
"dockerfiles/hermes-hux-foundation/hux/errors.py",
"dockerfiles/hermes-hux-foundation/hux/events.py",
"dockerfiles/hermes-hux-foundation/hux/flags.py",
"dockerfiles/hermes-hux-foundation/hux/foundation.py",
"dockerfiles/hermes-hux-foundation/hux/http.py",
"dockerfiles/hermes-hux-foundation/hux/identity.py",
"dockerfiles/hermes-hux-foundation/hux/memory.py",
"dockerfiles/hermes-hux-foundation/hux/modes.py",
"dockerfiles/hermes-hux-foundation/hux/multimodal.py",
"dockerfiles/hermes-hux-foundation/hux/organization.py",
"dockerfiles/hermes-hux-foundation/hux/policy.py",
"dockerfiles/hermes-hux-foundation/hux/privacy.py",
"dockerfiles/hermes-hux-foundation/hux/redaction.py",
"dockerfiles/hermes-hux-foundation/hux/releases.py",
"dockerfiles/hermes-hux-foundation/hux/release_security.py",
"dockerfiles/hermes-hux-foundation/hux/retention_scheduler.py",
"dockerfiles/hermes-hux-foundation/hux/research.py",
"dockerfiles/hermes-hux-foundation/hux/rules.py",
"dockerfiles/hermes-hux-foundation/hux/server.py",
"dockerfiles/hermes-hux-foundation/hux/store.py",
"dockerfiles/hermes-hux-foundation/hux/suggestions.py",
"dockerfiles/hermes-hux-foundation/hux_producer/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/client.py",
"dockerfiles/hermes-worker-hux/hux_hook/hooks.py",
"services/hermes/plugins/auto-router/hux_mode.py",
"services/hermes/plugins/hux-runtime/__init__.py",
"services/hermes/plugins/hux-runtime/context_ids.py",
"services/hermes/plugins/hux-runtime/emitters.py",
"services/hermes/plugins/hux-runtime/runtime.py",
"services/hermes/plugins/hux-runtime/tool_policy.py"
],
"tracked_files": [
"services/hermes/scripts/voice_route_preflight.py",
"ci/scripts/hermes_image_release.py",
"dockerfiles/hermes-kaniko-heredoc-runner.py",
"services/harbor/scripts/harbor_hermes_agent_immutability_ensure.py",
"services/hermes/scripts/hermes_image_release_status.py",
"services/hermes/scripts/jenkins_image_build_trigger.py",
"ci/scripts/publish_test_metrics.py",
"ci/scripts/publish_test_metrics_quality.py",
"ci/scripts/semgrep_report.py",
"ci/scripts/supply_chain_report.py",
"services/mailu/scripts/mailu_sync.py",
"services/mailu/scripts/mailu_sync_listener.py",
"services/hermes/scripts/cli_lane_board.py",
"services/hermes/scripts/cli_lane_capabilities.py",
"services/hermes/scripts/cli_lane_config.py",
"services/hermes/scripts/cli_lane_dispatch.py",
"services/hermes/scripts/cli_lane_evidence.py",
"services/hermes/scripts/cli_lane_execution.py",
"services/hermes/scripts/cli_lane_failover.py",
"services/hermes/scripts/cli_lane_files.py",
"services/hermes/scripts/cli_lane_finalization.py",
"services/hermes/scripts/cli_lane_goal.py",
"services/hermes/scripts/cli_lane_health.py",
"services/hermes/scripts/cli_lane_metrics.py",
"services/hermes/scripts/cli_lane_prompt.py",
"services/hermes/scripts/cli_lane_provider.py",
"services/hermes/scripts/cli_lane_quarantine.py",
"services/hermes/scripts/cli_lane_quota.py",
"services/hermes/scripts/cli_lane_records.py",
"services/hermes/scripts/cli_lane_recovery.py",
"services/hermes/scripts/cli_lane_retention.py",
"services/hermes/scripts/cli_lane_routing.py",
"services/hermes/scripts/cli_lane_runner.py",
"services/hermes/scripts/kanban_supervisor.py",
"services/hermes/scripts/supervisor_policy.py",
"testing/quality_contract.py",
"testing/quality_docs.py",
"testing/quality_hygiene.py",
"testing/quality_coverage.py",
"testing/quality_gate.py",
"services/gitea/scripts/gitea_branch_protection_check.py",
"services/hermes/scm-common/scripts/gitea_api.py",
"services/hermes/scm-common/scripts/gitea_api_policy.py",
"services/hermes/scm-common/scripts/scm_broker.py",
"services/hermes/scm-common/scripts/scm_broker_client.py",
"services/hermes/scm-common/scripts/scm_broker_io.py",
"services/hermes/scm-common/scripts/scm_broker_server.py",
"services/hermes/scripts/execution_pool_client.py",
"services/hermes/scripts/execution_pool_coordinator.py",
"services/hermes/scripts/execution_pool_maintenance.py",
"services/hermes/scripts/execution_pool_project.py",
"services/hermes/scripts/execution_pool_protocol.py",
"services/hermes/scripts/execution_pool_scm.py",
"services/hermes/scripts/execution_pool_server.py",
"services/hermes/scripts/execution_pool_store.py",
"services/hermes/scripts/execution_pool_worker.py",
"services/hermes/scripts/hermes_coordinator.py",
"services/hermes/scripts/node_account_audit.py",
"services/hermes/scripts/node_account_hardening.py",
"services/hermes/scripts/node_account_io.py",
"services/hermes/scripts/stage_runtime_access.py",
"services/hermes/scm-common/scripts/deadline_http.py",
"services/hermes/scm-common/scripts/git_pack_objects.py",
"services/hermes/scm-common/scripts/receive_pack_scan.py",
"services/hermes/scripts/node_polkit_audit.py",
"scripts/ops/hermes_handoff_acceptance.py",
"scripts/ops/hermes_handoff_arming.py",
"scripts/ops/hermes_handoff_catalog.py",
"scripts/ops/hermes_handoff_checks_access.py",
"scripts/ops/hermes_handoff_checks_delivery.py",
"scripts/ops/hermes_handoff_checks_platform.py",
"scripts/ops/hermes_handoff_checks_workers.py",
"scripts/ops/hermes_handoff_ephemeral.py",
"scripts/ops/hermes_handoff_evaluators.py",
"scripts/ops/hermes_handoff_exec.py",
"scripts/ops/hermes_handoff_json_rules.py",
"scripts/ops/hermes_handoff_model.py",
"scripts/ops/hermes_handoff_policy.py",
"scripts/ops/hermes_handoff_redaction.py",
"scripts/ops/hermes_handoff_rules.py",
"scripts/ops/hermes_handoff_run.py",
"testing/quality_handoff_mutation.py",
"dockerfiles/hermes-hux-foundation/hux/__init__.py",
"dockerfiles/hermes-hux-foundation/hux/artifacts.py",
"dockerfiles/hermes-hux-foundation/hux/audit.py",
"dockerfiles/hermes-hux-foundation/hux/budgets.py",
"dockerfiles/hermes-hux-foundation/hux/contracts.py",
"dockerfiles/hermes-hux-foundation/hux/diffs.py",
"dockerfiles/hermes-hux-foundation/hux/errors.py",
"dockerfiles/hermes-hux-foundation/hux/events.py",
"dockerfiles/hermes-hux-foundation/hux/flags.py",
"dockerfiles/hermes-hux-foundation/hux/foundation.py",
"dockerfiles/hermes-hux-foundation/hux/http.py",
"dockerfiles/hermes-hux-foundation/hux/identity.py",
"dockerfiles/hermes-hux-foundation/hux/memory.py",
"dockerfiles/hermes-hux-foundation/hux/modes.py",
"dockerfiles/hermes-hux-foundation/hux/multimodal.py",
"dockerfiles/hermes-hux-foundation/hux/organization.py",
"dockerfiles/hermes-hux-foundation/hux/policy.py",
"dockerfiles/hermes-hux-foundation/hux/privacy.py",
"dockerfiles/hermes-hux-foundation/hux/redaction.py",
"dockerfiles/hermes-hux-foundation/hux/releases.py",
"dockerfiles/hermes-hux-foundation/hux/release_security.py",
"dockerfiles/hermes-hux-foundation/hux/retention_scheduler.py",
"dockerfiles/hermes-hux-foundation/hux/research.py",
"dockerfiles/hermes-hux-foundation/hux/rules.py",
"dockerfiles/hermes-hux-foundation/hux/server.py",
"dockerfiles/hermes-hux-foundation/hux/store.py",
"dockerfiles/hermes-hux-foundation/hux/suggestions.py",
"dockerfiles/hermes-hux-foundation/hux_producer/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/__init__.py",
"dockerfiles/hermes-worker-hux/hux_hook/client.py",
"dockerfiles/hermes-worker-hux/hux_hook/hooks.py",
"services/hermes/plugins/auto-router/hux_mode.py",
"services/hermes/plugins/hux-runtime/__init__.py",
"services/hermes/plugins/hux-runtime/context_ids.py",
"services/hermes/plugins/hux-runtime/emitters.py",
"services/hermes/plugins/hux-runtime/runtime.py",
"services/hermes/plugins/hux-runtime/tool_policy.py"
]
}
}