Tony_tech/personal-agent-os
6
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

vault-sync: 2026-10-06 06:01 (jimmy)

Browse Source
This commit is contained in:
jimmy
2026-10-06 06:01:04 -07:00
parent d7d743a8a1
commit 7589b73608
5 changed files with 155 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
memory-systems/agent-os/04_projects/rudr9/status.md
+14
View File
@@ -48,3 +48,17 @@ RUDR9 (`github.com/Ardha-Eco-System/RUDR9`, MIT, by Ardha Studios) transforms a
1. Restart desktop app if new profiles missing from switcher.
2. Talk to **default (CTO)** profile with a feature request → it decomposes into kanban tasks → roles execute (sequential by default).
3. Monitor: `hermes kanban list` / desktop board.
## Grok review (2026-10-06) — guard plugin broken; fixes pending Tony's go
Grok (via file loop, `grok-to-leonard-2026-10-06-0019.md`) did a read-only audit; key claims code-verified by Leonard (plugins_dispatch.py:207 kwargs-only invocation + fail-closed set; guard `__init__.py:26` requires positional `params`; block format `{action,message}`).
- **CRITICAL:** guard blocks ALL tool calls in default/CTO sessions (TypeError → fail-closed). CTO is effectively broken until fixed.
- **HIGH:** guard not loaded on the 7 role profiles (per-home plugin discovery; only root has it) — "belt+suspenders" missing; enforcement = toolsets alone.
- **HIGH:** allowlist names mismatch v0.21 (`code_execution`→`execute_code`, `todo`→`todo_list`, `mcp__<server>__<tool>` double-underscore, missing `process_manage`).
- **HIGH:** read-only roles still have `code_execution computer_use browser delegation cronjob connections` enabled → real authority gap (`execute_code` can write/spawn).
- **MEDIUM:** CTO has no `kanban` toolset → can't drive board from chat (CLI only: `hermes -p default kanban create --assignee <role>`).
- **MEDIUM:** no `web` toolset anywhere (web.backend=nous unavailable).
- **MEDIUM:** read-only roles can't read code (`file` toolset is all-or-nothing) — decision needed (option a: accept, builder/vcm attach diffs; option b: enable file + rely on fixed guard).
- **LOW:** long-task hook inert (no telegram creds on default; kanban workers are subprocesses invisible to agent:step). active_profile=jimmy → always `-p default`. 3 stale blocked cards (t_3bccf77c, t_922cb956, t_6fa9ff0e) — do NOT unblock (would respawn tool-less CTO).
- **CANCELLED by Tony:** GitHub MCP/PAT — Gitea is enough. Keep github MCP disabled on default/vcm/reviewer.
- Proposed fixes F1–F8 (Grok): F1 disable guard on default (stopgap); F2 patch guard (signature/format/tool names); F3 deploy per-role; F4 tighten toolsets; F5 enable kanban toolset on default; F6 web backend pick; F7 archive stale cards; F8 read-access decision. None applied yet — awaiting Tony's go (2026-10-06).
- Grok fleet-ops templates (T1 board state / T2 dispatch / T3 stuck-worker recovery, PowerShell via `$env:LOCALAPPDATA\hermes\bin\hermes.exe`) in the same reply file.