From d0144d6db62ac9adb86894706532bdc5ca6de351 Mon Sep 17 00:00:00 2001 From: root Date: Tue, 11 Aug 2026 17:22:25 +0000 Subject: [PATCH 1/4] Ship: Koby external-agent ruling (fix api_key_env hygiene + docs) --- hermes-config-template.prose.md | 24 ++++++++++++++++++++++++ hermes-key-enforcement.prose.md | 10 +++++----- 2 files changed, 29 insertions(+), 5 deletions(-) diff --git a/hermes-config-template.prose.md b/hermes-config-template.prose.md index aec6746..b5a1e31 100644 --- a/hermes-config-template.prose.md +++ b/hermes-config-template.prose.md @@ -183,6 +183,21 @@ delegation: base_url: http://192.168.68.116/v1 api_key_env: LITELLM_API_KEY +# ─── External Agents (DeepSeek-primary) ─── + +Koby (.129) is a DeepSeek-primary external agent. + +- Primary Model: deepseek-v4-flash (via api.deepseek.com) + +- LitellM Access: Koby uses LITELLM_API_KEY for all harness-linked tasks + + (vision, web_extract, compression, etc.). + +- Rule: Do NOT change Koby's primary model to syslog-auto unless + + DeepSeek-specific reasoning is no longer required. + + # ─── Custom Provider ─── custom_providers: - name: harness @@ -379,6 +394,15 @@ curl -s -o /dev/null -w '%{http_code}' -H "Authorization: Bearer $K" http://192. - `/etc/environment` is NO LONGER the canonical key source (stale values there caused 401s). - Do NOT leave a hardcoded stale key in `/etc/environment` — it shadows the drop-in/wrapper. +### Rule 13: Koby Configuration (DeepSeek-primary) + +Koby uses a split-model architecture: + +- Primary Model: `deepseek-v4-flash` via `api.deepseek.com` (for reasoning) +- Auxiliary Models: `gpu-light` (vision/web_extract) and `syslog-auto` (compression) +- Key Hygiene: `api_key_env` is strictly `LITELLM_API_KEY` or `DEEPSEEK_API_KEY` +- Constraint: Do NOT touch Koby's primary model/provider/compression settings unless explicitly ruled by the captain. + ### Rule 14: Provider Name Must Match custom_providers Name (ADDED 2026-07-19, WAL #1471) - `model.provider` MUST be `harness` (the `custom_providers[0].name`), NOT the literal string `custom` diff --git a/hermes-key-enforcement.prose.md b/hermes-key-enforcement.prose.md index 544b2e7..b730520 100644 --- a/hermes-key-enforcement.prose.md +++ b/hermes-key-enforcement.prose.md @@ -190,7 +190,7 @@ litellm_settings: |-------|-----|-----|---------------|------------|--------|-----------------|---------------| | Tanko | 112 | .122 | `tanko` | Infisical vault | ✅ Fixed | `infisical run` | 20:17 UTC Jul 5 | | Mumuni | 100 (abiba) | .24 | `mumuni` | Infisical vault | ✅ Fixed | Pi Hermes gateway | 2026-07-27 | -| Koby | 111 | .129 | `koby` | Infisical vault | ✅ Fixed | `infisical run` | 23:30 UTC Jul 5 | +| Koby | 111 | .129 | `koby` | Infisical vault | ✅ Fixed | `infisical run` | 23:30 UTC Jul 5 | (DeepSeek-primary)| | Koonimo | 113 | .113 | `koonimo` | Infisical vault | ✅ Fixed | `infisical run` (migrated 2026-07-11) | 2026-07-11 | | Abiba | 100 | .65 | `abiba-pi` | Infisical vault | ✅ N/A (pi native) | — | 19:44 UTC Jul 5 | | Kagenz0 | 105 | .14 | — | — | ❌ DOWN | — | 19:14 EDT Jul 4 | @@ -202,10 +202,10 @@ litellm_settings: | Agent | `/litellm/v1/responses` | Deprecated `/v1` | Status | |-------|--------------------------|--------------------|--------| -| Mumuni | ✅ 5 sections | 0 | ✅ Authenticated | -| Tanko | ⚠️ No SSH access | — | Needs check | -| Koby | ⚠️ No route to host | — | Needs check | -| Koonimo | ⚠️ Connection timed out | — | Needs check | +| Mumuni | ✅ harness provider | ✅ auxiliary on /v1 (valid) | ✅ Authenticated (verified 2026-08-09) | +| Tanko | ✅ 5 sections | 0 | ✅ Migrated 2026-08-08, keys 200 | +| Koby | ✅ custom provider (harness name) | — | ✅ External DeepSeek primary (intentional, captain ruling 2026-08-11) | +| Koonimo | ✅ .114 (baggy) | — | ✅ 128K context applied 2026-08-09 | ### Systemd Service Pattern (2026-07-11 — vault migration) -- 2.54.0 From 9f0a940cee6cda627f9b90f7250a4842e510547a Mon Sep 17 00:00:00 2001 From: root Date: Tue, 11 Aug 2026 18:02:08 +0000 Subject: [PATCH 2/4] Fix no-mistakes warnings: prose out of YAML fence, Rule 16 rename, table cell fix --- hermes-config-template.prose.md | 17 +---------------- hermes-key-enforcement.prose.md | 2 +- 2 files changed, 2 insertions(+), 17 deletions(-) diff --git a/hermes-config-template.prose.md b/hermes-config-template.prose.md index b72cd27..f3f7058 100644 --- a/hermes-config-template.prose.md +++ b/hermes-config-template.prose.md @@ -183,21 +183,6 @@ delegation: base_url: http://192.168.68.116/litellm/v1 # Rule 5 (2026-08-09): canonical authenticated; /v1 also OK api_key_env: LITELLM_API_KEY -# ─── External Agents (DeepSeek-primary) ─── - -Koby (.129) is a DeepSeek-primary external agent. - -- Primary Model: deepseek-v4-flash (via api.deepseek.com) - -- LitellM Access: Koby uses LITELLM_API_KEY for all harness-linked tasks - - (vision, web_extract, compression, etc.). - -- Rule: Do NOT change Koby's primary model to syslog-auto unless - - DeepSeek-specific reasoning is no longer required. - - # ─── Custom Provider ─── custom_providers: - name: harness @@ -400,7 +385,7 @@ curl -s -o /dev/null -w '%{http_code}' -H "Authorization: Bearer $K" http://192. - `/etc/environment` is NO LONGER the canonical key source (stale values there caused 401s). - Do NOT leave a hardcoded stale key in `/etc/environment` — it shadows the drop-in/wrapper. -### Rule 13: Koby Configuration (DeepSeek-primary) +### Rule 16: Koby Configuration (DeepSeek-primary) Koby uses a split-model architecture: diff --git a/hermes-key-enforcement.prose.md b/hermes-key-enforcement.prose.md index d7f1ad6..b06f667 100644 --- a/hermes-key-enforcement.prose.md +++ b/hermes-key-enforcement.prose.md @@ -191,7 +191,7 @@ litellm_settings: |-------|-----|-----|---------------|------------|--------|-----------------|---------------| | Tanko | 112 | .122 | `tanko` | Infisical vault | ✅ Fixed | `infisical run` | 20:17 UTC Jul 5 | | Mumuni | 100 (abiba) | .24 | `mumuni` | Infisical vault | ✅ Fixed | Pi Hermes gateway | 2026-07-27 | -| Koby | 111 | .129 | `koby` | Infisical vault | ✅ Fixed | `infisical run` | 23:30 UTC Jul 5 | (DeepSeek-primary)| +| Koby | 111 | .129 | `koby` | Infisical vault | ✅ Fixed (DeepSeek-primary) | `infisical run` | 23:30 UTC Jul 5 | | Koonimo | 113 | .114 | `koonimo` | Infisical vault | ✅ Fixed | `infisical run` (migrated 2026-07-11) | 2026-08-09 | | Abiba | 100 | .65 | `abiba-pi` | Infisical vault | ✅ N/A (pi native) | — | 19:44 UTC Jul 5 | | Kagenz0 | 105 | .14 | — | — | ❌ DOWN | — | 19:14 EDT Jul 4 | -- 2.54.0 From d73084d481f852f2ddb40773d3c6dbe159431efd Mon Sep 17 00:00:00 2001 From: root Date: Tue, 11 Aug 2026 18:04:31 +0000 Subject: [PATCH 3/4] Trivial: trigger no-mistakes re-run (all fixes applied) --- hermes-config-template.prose.md | 1 + 1 file changed, 1 insertion(+) diff --git a/hermes-config-template.prose.md b/hermes-config-template.prose.md index f3f7058..942faa4 100644 --- a/hermes-config-template.prose.md +++ b/hermes-config-template.prose.md @@ -1,3 +1,4 @@ +Fixed no-mistakes: removed prose from YAML fence, renamed Rule 13→16, fixed Koby table cell --- kind: template name: hermes-config-template -- 2.54.0 From 3abf7845388f2e6d6b70bc4a9968945d9f1282cd Mon Sep 17 00:00:00 2001 From: root Date: Tue, 11 Aug 2026 18:16:12 +0000 Subject: [PATCH 4/4] Fix no-mistakes warnings: remove prose from fence, reorder/renumber rules, and add Koby exception to Rule 10 --- hermes-config-template.prose.md | 21 +++++++++++---------- 1 file changed, 11 insertions(+), 10 deletions(-) diff --git a/hermes-config-template.prose.md b/hermes-config-template.prose.md index 942faa4..0000193 100644 --- a/hermes-config-template.prose.md +++ b/hermes-config-template.prose.md @@ -1,4 +1,3 @@ -Fixed no-mistakes: removed prose from YAML fence, renamed Rule 13→16, fixed Koby table cell --- kind: template name: hermes-config-template @@ -297,6 +296,7 @@ The following MUST be identical across ALL profiles: - See `devops-hermes-compression` skill for full reference ### Rule 10: Default Model Must Be `syslog-auto` (All Agents) +- **Koby Exception**: Per captain ruling 2026-08-11, Koby is a DeepSeek-primary external agent; its primary model remains `deepseek-v4-flash` (via api.deepseek.com to preserve DeepSeek-specific reasoning, while other sections follow Rule 10. - **Hermes agents**: `model.default: syslog-auto`, `custom_providers[0].model: syslog-auto` - **pi agents**: `defaultModel: syslog-auto` in `settings.json`, first model in `models.json` - `syslog-auto` is the LiteLLM routing model — it load-balances between strix-moe @@ -386,15 +386,6 @@ curl -s -o /dev/null -w '%{http_code}' -H "Authorization: Bearer $K" http://192. - `/etc/environment` is NO LONGER the canonical key source (stale values there caused 401s). - Do NOT leave a hardcoded stale key in `/etc/environment` — it shadows the drop-in/wrapper. -### Rule 16: Koby Configuration (DeepSeek-primary) - -Koby uses a split-model architecture: - -- Primary Model: `deepseek-v4-flash` via `api.deepseek.com` (for reasoning) -- Auxiliary Models: `gpu-light` (vision/web_extract) and `syslog-auto` (compression) -- Key Hygiene: `api_key_env` is strictly `LITELLM_API_KEY` or `DEEPSEEK_API_KEY` -- Constraint: Do NOT touch Koby's primary model/provider/compression settings unless explicitly ruled by the captain. - ### Rule 14: Provider Name Must Match custom_providers Name (ADDED 2026-07-19, WAL #1471) - `model.provider` MUST be `harness` (the `custom_providers[0].name`), NOT the literal string `custom` @@ -433,3 +424,13 @@ Koby uses a split-model architecture: 5. **Set model choice** — Per agent's workload 6. **Verify** — curl all shared endpoints, test the model with the new key 7. **Report** — What was changed, preserved, custom +### Rule 16: Koby Configuration (DeepSeek-primary) +(Ref: See Rule 10 for default model behavior, with Koby exception) + +Koby uses a split-model architecture: + +- Primary Model: `deepseek-v4-flash` via `api.deepseek.com` (for reasoning) +- Auxiliary Models: `gpu-light` (vision/web_extract) and `syslog-auto` (compression) +- Key Hygiene: `api_key_env` is strictly `LITELLM_API_KEY` or `DEEPSEEK_API_KEY` +- Constraint: Do NOT touch Koby's primary model/provider/compression settings unless explicitly ruled by the captain. + -- 2.54.0