Skip to content

Agent Oasis 3.0.0 - Hermes Fleet

Choose a tag to compare

@ShadowfetchAI ShadowfetchAI released this 03 Aug 02:50

Hermes goes from a 221-line aggregate-only sync button buried in Agents to a first-class dashboard.

Hermes Fleet

  • Live kanban shape and its oldest blockers, read via hermes kanban stats/list --json.
  • The open decision queue, grouped by authority level with ack-deadline urgency, read via the standalone decide.py list --json tool.
  • Roster and gateway process liveness, read via hermes profile list / hermes gateway list.
  • Fleet structural integrity from fleet_integrity.py's state file.
  • Per-agent session/message/token telemetry, carried over from the prior release.
  • Works against any Hermes install, not just Shadowfetch's own - every remote path (profiles, tools, state, gateway unit pattern) is configurable and validated against the same injection-resistant charset already used for the SSH host.
  • No fleet-wide "duty success rate" is invented: no such aggregate exists on a real Hermes install, and a locked-in test fails the build if a field shaped like one is ever added.

Redaction, by construction

Kanban card bodies and decision context/recommendation/options text - which on a real install contain internal strategic content - are never decoded into the app. The Swift models simply have no property for that data, so JSONDecoder drops it before a value exists. Two new tests re-encode a parsed model built from a real sensitive-looking payload and assert the sensitive text is verifiably absent.

Docs

New docs/HERMES-FLEET.md: the exact commands run, exact fields kept versus dropped, and the full threat model for the expanded SSH surface.

Verification

79 tests (was 70), all green. Signed with a Developer ID Application certificate, notarized, and stapled - spctl -a -vvv -t open accepts the DMG.

Verify

shasum -a 256 -c SHA256SUMS
spctl -a -vvv -t open Agent-Oasis-3.0.0.dmg