jenkins b8f2163af0 hermes: prove sudo and polkit denial closed ...

Expand sudoers User_Alias chains so aliases, wildcards, netgroups, and
undefined names cannot smuggle authority to the Hermes account, and
require polkit grants to scope through exact literal identity
comparisons: computed strings, bracket lookups, subject aliasing,
operator-built values, and unconditional or wildcard grants fail closed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-17 15:15:47 -03:00

..

test_atlas_ai_dashboard.py

monitoring(ai): add provider quota operations dashboard

2026-08-16 05:13:20 -03:00

test_hermes_ai_usage_exporter.py

monitoring(ai): add provider quota operations dashboard

2026-08-16 05:13:20 -03:00

test_hermes_auto_router.py

hermes: preserve exact routes and accept Telegram images

2026-08-15 22:15:40 -03:00

test_hermes_chat_images.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_chat_local_runtime.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_chat_provider_auth.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_chat_quality.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_chat_routing_runtime.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_chat_session_continuity.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_chat_support.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_claude_broker.py

hermes: keep provider lanes available under load

2026-08-15 22:15:40 -03:00

test_hermes_cli_lane_goal.py

hermes: widen local goal judge timeout

2026-08-16 13:29:10 -03:00

test_hermes_cli_lane_routing.py

hermes: enforce goal completion evidence

2026-08-16 11:11:38 -03:00

test_hermes_cli_lanes_access.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_cli_lanes_configuration.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_cli_lanes_kanban.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_cli_lanes_support.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_cli_lanes_toolchain.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_cli_lanes.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_coordinator_cassandra.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_coordinator_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_coordinator_support.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_coordinator.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_deadline_http.py

hermes: bound SCM control calls with hard deadlines

2026-08-17 15:15:35 -03:00

test_hermes_deadline_stream.py

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

test_hermes_git_pack_objects.py

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

test_hermes_gitea_branch_coverage.py

gitea: require literal branch protection rules

2026-08-17 15:15:35 -03:00

test_hermes_gitea_internal_coverage.py

hermes: bound SCM control calls with hard deadlines

2026-08-17 15:15:35 -03:00

test_hermes_gitea_pr_client.py

hermes: bound SCM control calls with hard deadlines

2026-08-17 15:15:35 -03:00

test_hermes_gitea_pr_creation.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_gitea_pr_dlp.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_gitea_pr_integration.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_gitea_pr_postconditions.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_gitea_support.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_kanban_recovery.py

hermes: recover stale kanban status pages

2026-08-16 04:49:02 -03:00

test_hermes_main_wrapper.py

hermes: load tool credentials before s6

2026-08-15 03:44:00 -03:00

test_hermes_model_gate.py

hermes: preserve Switchyard response content

2026-08-11 23:12:43 -03:00

test_hermes_node_account_hardening.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_account_io.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_account_privilege_audit.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_account_support.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_acl_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_audit_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_hardening_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_io_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_node_polkit_identity.py

hermes: prove sudo and polkit denial closed

2026-08-17 15:15:47 -03:00

test_hermes_node_sudo_alias_audit.py

hermes: prove sudo and polkit denial closed

2026-08-17 15:15:47 -03:00

test_hermes_receive_pack_scan.py

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

test_hermes_runtime_access.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_runtime_stage_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_scm_broker_client_coverage.py

hermes: bound SCM control calls with hard deadlines

2026-08-17 15:15:35 -03:00

test_hermes_scm_broker_handler_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_scm_broker_internal_coverage.py

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

test_hermes_scm_broker_policy.py

gitea: require literal branch protection rules

2026-08-17 15:15:35 -03:00

test_hermes_scm_broker_streaming.py

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

test_hermes_scm_broker_support.py

hermes: quarantine-scan pushed git objects

2026-08-17 15:15:47 -03:00

test_hermes_scm_broker.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_scm_server_coverage.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_hermes_telegram_media_server.py

hermes: deliver generated media to Telegram

2026-08-15 00:34:08 -03:00

test_hermes_worker_recovery.py

hermes: recover workers after pod restart

2026-08-15 07:07:21 -03:00

test_jetson_tegrastats_exporter.py

fix(monitoring): retain short Jetson GPU activity

2026-08-09 14:38:51 -03:00

test_publish_test_metrics_paths.py

monitoring(testing): link test metrics to build artifacts

2026-04-21 11:39:13 -03:00

test_publish_test_metrics_quality.py

refactor: restructure services layout, retire oceanus, add aether scaffolding

2026-08-05 16:21:36 -03:00

test_publish_test_metrics.py

refactor: restructure services layout, retire oceanus, add aether scaffolding

2026-08-05 16:21:36 -03:00

test_quality_contract.py

quality(titan-iac): widen enforced coverage contract

2026-04-20 21:39:53 -03:00

test_quality_coverage_helpers.py

hermes: isolate Atlas SCM write authority

2026-08-17 07:58:44 -03:00

test_quality_gate_helpers.py

test(titan-iac): raise quality gate coverage for quality runner

2026-04-20 15:29:46 -03:00

test_quality_gate.py

quality(titan-iac): widen enforced coverage contract

2026-04-20 21:39:53 -03:00

test_quality_hygiene_helpers.py

quality(titan-iac): widen enforced coverage contract

2026-04-20 21:39:53 -03:00

test_repo_structure.py

refactor: restructure services layout, retire oceanus, add aether scaffolding

2026-08-05 16:21:36 -03:00

test_semgrep_report.py

refactor: restructure services layout, retire oceanus, add aether scaffolding

2026-08-05 16:21:36 -03:00

test_supply_chain_report.py

refactor: restructure services layout, retire oceanus, add aether scaffolding

2026-08-05 16:21:36 -03:00