v1.2.0 — Safer, broader LLM orchestration

Myrmex Hive v1.2.0 turns the LLM-orchestration loop from "works" into "safe to trust and broad enough to scale," and gives operators a documented golden path from installed to indispensable.

Highlights

Orchestration

• ask --plan (dry-run): the model runs the whole loop but executes nothing — preview the tool calls it would make before trusting it.
• Fleet-wide ask --all / --agents a,b: one prompt across every connected agent (or a subset), summaries aggregated. Each agent still passes the full six-gate funnel.
• Scheduled orchestration: opt-in scheduled_tasks run a prompt on a timer and route the summary to your alert targets — unattended fleet health checks.

Safety

• Risk tiers fail closed: built-in mutating tools (service_control, run_command) default to a non-read tier, so a tool can't slip past approval gating just because it wasn't classified. A guard test enforces it.
• Approvals page on-call: a new pending approval notifies your alert targets, so a legitimate mutation can't quietly expire.
• Metrics trend: get_metrics surfaces recent history when the Gateway is polling, so the model judges health on a trend, not a single sample.
• Reconnection race fixed: a dropped connection's teardown can no longer evict a live reconnected agent (identity-scoped removal).

Quality & docs

• Opt-in nightly live-model eval grades a real model on format, hallucination, convergence, and prompt-injection resistance — catches a model swap that makes the assistant "dumber."
• New Golden Path guide: what agents can do to your hosts, the six safety gates, and a staged rollout.
• First cmd/myrmex tests; security-critical coverage across pkg/command and the agent.

Install

docker pull ghcr.io/olafkfreund/myrmex-gateway:1.2.0
helm install hive oci://ghcr.io/olafkfreund/charts/myrmex-hive --version 1.2.0

Signed containers (cosign) and SBOMs are attached. Everything new is opt-in and backward-compatible.

The Homebrew cask is published: brew tap olafkfreund/myrmex && brew install --cask myrmex-hive. (Published manually for v1.2.0 because the tap token needed refreshing; future releases publish it automatically — releases now skip the cask gracefully if the token is invalid, myrmex-hive#171.)