Add Rule 14 (provider name must match custom_providers) + audit script

Rule 14: model.provider MUST be 'harness' (custom_providers[0].name), NOT 'custom'.
When provider: custom, Hermes falls through to generic resolution path that
ignores key_env, producing 'no-key-required' → HTTP 401.

audit-hermes-config.py: encodes all 14 contract rules as automated checks.
Run before and after any Hermes config change.

Root cause: WAL #1471 (2026-07-19 Mumuni 401 incident)

This commit is contained in:

root

2026-07-23 12:16:33 +00:00

parent a74229ee74

commit 1b1de8b0fc

3 changed files with 251 additions and 0 deletions

.gitignore

View File

				`@@ -0,0 +1 @@`
				`__pycache__/`