{"_id":"@anatolijlaptev1991/hermes-self-harness","name":"@anatolijlaptev1991/hermes-self-harness","dist-tags":{"latest":"0.1.0"},"versions":{"0.1.0":{"name":"@anatolijlaptev1991/hermes-self-harness","version":"0.1.0","description":"Governance layer for Hermes Agent — session pinning, static guard, SLO, audits","type":"module","main":"packages/cli/dist/cli.js","bin":{"hermes-self-harness":"packages/cli/dist/cli.js","hsh":"packages/cli/dist/cli.js"},"engines":{"node":">=24"},"scripts":{"build":"node scripts/build.mjs","test":"python -m pytest python/hermes_self_harness/tests/ -v --tb=short","pack:verify":"node scripts/verify-release.mjs","prepack":"npm run build"},"keywords":["hermes-agent","governance","self-harness","slo","static-guard","session-pinning","reproducible-build","security"],"author":{"name":"Анатолий Лаптев","email":"anatolij.laptev.1991@gmail.com"},"license":"MIT","repository":{"type":"git","url":"git+https://github.com/anatolijlaptev1991-ctrl/hermes-self-harness.git"},"bugs":{"url":"https://github.com/anatolijlaptev1991-ctrl/hermes-self-harness/issues"},"homepage":"https://github.com/anatolijlaptev1991-ctrl/hermes-self-harness#readme","gitHead":"e6edfad54849b05a25d01ca4a5a107175ef11deb","_id":"@anatolijlaptev1991/hermes-self-harness@0.1.0","_nodeVersion":"24.16.0","_npmVersion":"11.16.0","dist":{"integrity":"sha512-yI/nYQQu7a3YJl8X22bcuLYxtwT6X5QUofMV3SHYiC+J1brZuRgni35h1FNtHX3u7+sMUpTMF/piZWeJiJKdwQ==","shasum":"ff47c743d3063971d3aea55d9315635c45b7e4a3","tarball":"https://registry.npmjs.org/@anatolijlaptev1991/hermes-self-harness/-/hermes-self-harness-0.1.0.tgz","fileCount":5,"unpackedSize":94152,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQDPmxrik/DUbPOIRmOJsZzoBtN8JugET/uGXED0QAF1BQIhAJZyMTpqCtkLk5zlXdsIQzrxns2OvPlHn2Rc7FZ05pAc"}]},"_npmUser":{"name":"anatolijlaptev1991","email":"anatolij.laptev.1991@gmail.com"},"directories":{},"maintainers":[{"name":"anatolijlaptev1991","email":"anatolij.laptev.1991@gmail.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/hermes-self-harness_0.1.0_1784065008432_0.7791792236874906"},"_hasShrinkwrap":false}},"time":{"created":"2026-07-14T21:36:48.279Z","0.1.0":"2026-07-14T21:36:48.579Z","modified":"2026-07-14T21:36:48.761Z"},"maintainers":[{"name":"anatolijlaptev1991","email":"anatolij.laptev.1991@gmail.com"}],"description":"Governance layer for Hermes Agent — session pinning, static guard, SLO, audits","homepage":"https://github.com/anatolijlaptev1991-ctrl/hermes-self-harness#readme","keywords":["hermes-agent","governance","self-harness","slo","static-guard","session-pinning","reproducible-build","security"],"repository":{"type":"git","url":"git+https://github.com/anatolijlaptev1991-ctrl/hermes-self-harness.git"},"author":{"name":"Анатолий Лаптев","email":"anatolij.laptev.1991@gmail.com"},"bugs":{"url":"https://github.com/anatolijlaptev1991-ctrl/hermes-self-harness/issues"},"license":"MIT","readme":"# Hermes Self-Harness\n\n**Governance layer for Hermes Agent** — session release pinning, memory architecture, SLO monitoring, static guard, emergency containment, reproducible packaging and seven independent audits.\n\n## Совместимая версия Hermes\n\nHermes Agent v0.18.2 (tag `v2026.7.7.2`, commit `9de9c25f620ff7f1ce0fd5457d596052d5159596`).\n\n## Windows 11 Prerequisites\n\n- Windows 11 x64\n- Python 3.12+\n- Node.js v24+\n- npm 11+\n- Hermes Agent installed\n\n## Architecture\n\n```\n┌─────────────────────────────────────────┐\n│         Hermes Agent (runtime)          │\n│  ┌─────────────────────────────────┐    │\n│  │   Self-Harness Plugin (Python)  │    │\n│  │  ┌──────┐ ┌──────┐ ┌─────────┐ │    │\n│  │  │Static│ │Sessio│ │Emergency│ │    │\n│  │  │Guard │ │n Pin │ │Containm │ │    │\n│  │  └──────┘ └──────┘ └─────────┘ │    │\n│  │  ┌──────┐ ┌──────┐ ┌─────────┐ │    │\n│  │  │Budget│ │Drift │ │ Weakness│ │    │\n│  │  │Govern│ │Detect│ │  Mining │ │    │\n│  │  └──────┘ └──────┘ └─────────┘ │    │\n│  └─────────────────────────────────┘    │\n│  ┌─────────────────────────────────┐    │\n│  │    SQLite Governance Store      │    │\n│  │  releases │ session_pins │ ...  │    │\n│  └─────────────────────────────────┘    │\n└─────────────────────────────────────────┘\n```\n\n## What is built-in Hermes vs Self-Harness\n\n| Feature | Built-in Hermes | Self-Harness adds |\n|---------|----------------|-------------------|\n| Memory | MEMORY.md, USER.md | M2 architecture, provenance, drift detection |\n| Sessions | Session persistence | Release pinning, mid-session promotion block |\n| Plugins | General plugins | Governance hooks, static guard, policy DSL |\n| Skills | Skill curator | Write approval gates, risk classification |\n| Cron | Cron jobs | SLO accounting, burn-rate alerts |\n\n## Installation\n\n### From npm\n\n```bash\nnpm install -g @anatolijlaptev1991/hermes-self-harness\nhsh install --profile evaluation\n```\n\n### From GitHub\n\n```bash\ngit clone https://github.com/anatolijlaptev1991-ctrl/hermes-self-harness.git\ncd hermes-self-harness\npip install -e python/hermes_self_harness/\n```\n\n## CLI Commands\n\n```bash\nhsh doctor                    # Check installation health\nhsh init --project <path>     # Initialize project\nhsh build                     # Build artifacts\nhsh test --isolation clean    # Run tests in clean room\nhsh pack                      # Create npm tgz + wheel\nhsh verify <tgz>              # Verify package integrity\nhsh install --profile evaluation\nhsh install --profile production --require-approval\nhsh uninstall --profile <name>\nhsh profile create-safe       # Create safe profile\nhsh release manifest          # Show release manifest\nhsh reproduce --from <manifest>  # Reproduce release\nhsh audit --all               # Run seven audits\n```\n\n## Session Boundary Model\n\nSelf-Harness enforces strict session-release boundaries:\n- One session = one `release_id` (immutable)\n- Mid-session promotion is **forbidden**\n- Changes activate via: new session → blue/green → controlled rebuild\n\n## Memory Architecture (M2)\n\nPhase 1 uses architecture M2: built-in Hermes memory is authoritative.\nExternal backends (Memanto, QMD, Graphify) are optional on-demand tools.\n\n## Build & Test\n\n```bash\n# Python tests (217 tests)\ncd python/hermes_self_harness\npython -m pytest tests/ -v\n\n# npm package build\nnpm ci\nnpm run build\nnpm test\nnpm pack\n```\n\n## Security Model\n\n- Production memory/skill writes require approval\n- YOLO mode forbidden in production\n- Path traversal protection during install\n- Secret scanning before publication\n- Artifact signing and attestation\n- Seven independent audit contours before release\n\n## Failure & Degradation\n\n| Failure | Behavior |\n|---------|----------|\n| External backend down | Degraded response with `degraded=true` |\n| SQLite corruption | Restore from backup, quarantine corrupt DB |\n| Crash loop (5x) | Activate Safe Mode |\n| Disk full | Read-only mode, alert operator |\n| KL drift > 0.2 | Block automatic changes, require audit |\n\n## Uninstall / Rollback\n\n```bash\nhsh uninstall --profile production\n# Or rollback to previous release:\nhsh install --profile production --from <previous-manifest>\n```\n\n## Documentation\n\n- [Architecture](docs/architecture.md)\n- [Source Specification](docs/source-spec.md) (normative v2.3)\n- [Windows 11 Guide](docs/windows-11.md)\n- [Testing](docs/testing.md)\n- [Release](docs/release.md)\n- [Runbooks](docs/runbooks.md)\n\n## Compatibility Matrix\n\nSee [COMPATIBILITY.md](COMPATIBILITY.md).\n\n## Reproducibility\n\nSee [REPRODUCIBILITY.md](REPRODUCIBILITY.md).\n\n## License\n\nMIT — see [LICENSE](LICENSE).\n\n## Author\n\nАнатолий Лаптев (anatolijlaptev1991)\n","readmeFilename":"README.md","_rev":"1-0786526e5ed28f1d13ccfe84a1715229"}