jenkins b8f2163af0 hermes: prove sudo and polkit denial closed ...

Expand sudoers User_Alias chains so aliases, wildcards, netgroups, and
undefined names cannot smuggle authority to the Hermes account, and
require polkit grants to scope through exact literal identity
comparisons: computed strings, bracket lookups, subject aliasing,
operator-built values, and unconditional or wildcard grants fail closed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-17 15:15:47 -03:00

..

oauth2-proxy-templates

hermes: restore terminal rendering and worker lineage

2026-08-13 02:49:41 -03:00

plugins

hermes: preserve exact routes and accept Telegram images

2026-08-15 22:15:40 -03:00

router

hermes: add durable Telegram topics

2026-08-16 15:59:09 -03:00

scm-common

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

scripts

hermes: prove sudo and polkit denial closed

2026-08-17 15:15:47 -03:00

skills

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

agent-certificate.yaml

feat(hermes): split chat agent and triage surfaces

2026-08-08 17:59:57 -03:00

agent-configmap.yaml

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

agent-deployment.yaml

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

agent-ingress.yaml

hermes(agent): restore stock dashboard reliability

2026-08-10 21:09:06 -03:00

agent-kubeconfig.yaml

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

ariadne-handoff-rbac.yaml

gpu(titan-24): add Hermes local-first fallback handoff

2026-08-01 22:50:58 -03:00

chat-configmap.yaml

hermes: restore native provider routing

2026-08-12 23:08:21 -03:00

chat-pvcs.yaml

fix(hermes): restore isolated user features

2026-08-08 21:28:33 -03:00

chat-router.yaml

hermes: add durable Telegram topics

2026-08-16 15:59:09 -03:00

chat-sandbox.yaml

hermes(chat): expand isolated user capacity

2026-08-13 14:31:29 -03:00

chat-statefulset.yaml

hermes: add durable Telegram topics

2026-08-16 15:59:09 -03:00

configmap.yaml

hermes: make Switchyard the routing authority

2026-08-11 20:22:26 -03:00

deployment.yaml

hermes: add durable Telegram topics

2026-08-16 15:59:09 -03:00

image-policy-configmap.yaml

hermes: add automatic hosted and local image routes

2026-08-11 05:20:18 -03:00

kustomization.yaml

hermes: prove sudo and polkit denial closed

2026-08-17 15:15:47 -03:00

local-image-deployment.yaml

gpu(titan-24): use compatible sequential offload

2026-08-11 15:29:58 -03:00

local-image-rbac.yaml

hermes: add automatic hosted and local image routes

2026-08-11 05:20:18 -03:00

model-gate-configmap.yaml

hermes: preserve Switchyard response content

2026-08-11 23:12:43 -03:00

model-gate-deployment.yaml

hermes: preserve Switchyard response content

2026-08-11 23:12:43 -03:00

model-gate-rbac.yaml

hermes: add automatic hosted and local image routes

2026-08-11 05:20:18 -03:00

model-gate-state.yaml

gpu(titan-24): add Hermes local-first fallback handoff

2026-08-01 22:50:58 -03:00

namespace.yaml

agent: replace OpenClaw with Hermes

2026-07-21 21:02:44 -03:00

networkpolicy.yaml

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

node-ssh-access.yaml

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

NOTES.md

hermes(agent): restore stock dashboard reliability

2026-08-10 21:09:06 -03:00

oauth2-proxy.yaml

hermes: stabilize oauth sessions and enable images

2026-08-11 01:51:30 -03:00

oauth-session-store.yaml

hermes: place OAuth sessions on shared Pi storage

2026-08-11 01:54:35 -03:00

pvc.yaml

hermes: isolate runtime access and expose activity

2026-08-15 22:15:40 -03:00

rbac.yaml

feat(hermes): make cluster triage immediately usable

2026-08-02 17:26:58 -03:00

routing-catalog-pvc.yaml

hermes: make Switchyard the routing authority

2026-08-11 20:22:26 -03:00

service.yaml

hermes: keep provider lanes available under load

2026-08-15 22:15:40 -03:00

switchyard-configmap.yaml

hermes: add audited Atlas operator access

2026-08-15 13:22:01 -03:00

switchyard-deployment.yaml

hermes: isolate runtime access and expose activity

2026-08-15 22:15:40 -03:00

switchyard-pvc.yaml

hermes: relocate Switchyard state from wedged node

2026-08-11 22:30:33 -03:00

switchyard-service.yaml

hermes: make Switchyard the routing authority

2026-08-11 20:22:26 -03:00

vault-serviceaccount.yaml

hermes: make Switchyard the routing authority

2026-08-11 20:22:26 -03:00

voice-deployment.yaml

hermes: add private image generation and repair xhigh fallback

2026-08-11 01:14:46 -03:00