10 Commits

Include renames

Author	SHA1	Message	Date
abiba-bot	7400dfd833	fix: add MCP server checks to audit-hermes-config.py ... Implement Rule 15 automated enforcement for MCP servers: - Validate MCP server URLs against known endpoints (ra-h-os, litellm) - Check for authentication headers on MCP server configs - Warn if header values look like env-vars instead of literal keys - Warn if no auth header is present This ensures the MCP URL/header invariants from the prose contract are enforced at the earliest shared boundary (before config application).	2026-09-17 12:33:52 +00:00
root	876b011359	no-mistakes(document): Align Rule 9 max_context_window rationale with pool floor	2026-09-12 22:21:57 +00:00
root	8210fd905c	fix: align contracts to 4-name LiteLLM registry (2026-09-12) ... - Remove retired names (qwen3.6-27B-code, qwen3.6-35B-udq4) from live alias claims - Update Strix Halo model to Carnice-Qwen3.6-MoE-35B-A3B-Q4_K_M.gguf (strix-moe, 256K ctx) - Fix litellm-health step 7 probe to gpu-vision (monitor key scoped) - Move qwen3.6-27B-code/35B-udq4 from raw-but-live to non-resolving in audit - Fold in pm2-self-heal: remove spoton-service (live PM2 set is 4/4) - Update hermes templates, key enforcement, timeout tables to live names	2026-09-12 21:39:54 +00:00
root	3d55764799	no-mistakes(review): Split retired-alias audit into fail vs warn; fix key claim	2026-09-12 16:41:35 +00:00
root	ce48070f21	no-mistakes(review): Derive model fields recursively; fix historical latency and key claims	2026-09-12 16:33:58 +00:00
root	9e581ab203	no-mistakes(review): Complete retired-alias field coverage; fix misleading example labels	2026-09-12 16:26:14 +00:00
root	9cac3589cf	no-mistakes(review): Fix compression example alias; make retired aliases fail audit	2026-09-12 16:19:43 +00:00
abiba	221f9f79f3	fix(audit): reject retired aliases; sweep gpu-light/gemma-4-12b to gpu-vision ... audit-hermes-config.py Rule 8 required auxiliary.vision.model and auxiliary.web_extract.model to equal the retired 'gpu-light', so a config adopting the live canonical 'gpu-vision' FAILED our own audit - the audit was enforcing a dead alias (400 Invalid model name). Rule 8 now requires gpu-vision; retired names gpu-light/crew-auto join the raw-name rejection set; the guidance message names the live aliases. Sweep of the remaining references: gpu-self-heal stops canonicalizing gpu-light; hermes-config-template, hermes-agent-baseline, hermes-key-enforcement, inference-optimization, litellm-client-timeouts and gpu-fleet now use the live gpu-vision alias. Where a file restated model/rpm/weight/fallback state it now points at CT 116 /opt/inference-harness/litellm_config.yaml instead of duplicating it. koby's .129 config is report-only and recorded, not edited. Adds tests/test_audit_hermes_config_alias.py: executes the audit CLI and asserts gpu-vision passes while gpu-light and gemma-4-12b fail.	2026-09-12 16:11:46 +00:00
root	cd479caeec	Fix: update compression model to syslog-auto across contract and audit (Rule 7) ... - Updated hermes-config-template.prose.md: all references to strix-moe for compression changed to syslog-auto to match operational decision on 2026-07-23 (prevents sustained Strix Halo thermal load via weighted pool). - Updated audit-hermes-config.py Rule 7 to expect syslog-auto instead of strix-moe, ensuring Abiba's next run validates against the correct baseline.	2026-07-23 18:02:56 +00:00
root	1b1de8b0fc	Add Rule 14 (provider name must match custom_providers) + audit script ... Rule 14: model.provider MUST be 'harness' (custom_providers[0].name), NOT 'custom'. When provider: custom, Hermes falls through to generic resolution path that ignores key_env, producing 'no-key-required' → HTTP 401. audit-hermes-config.py: encodes all 14 contract rules as automated checks. Run before and after any Hermes config change. Root cause: WAL #1471 (2026-07-19 Mumuni 401 incident)	2026-07-23 12:16:33 +00:00