# RUDR9 — 9-Role AI Engineering Team (Hermes)

Status: **INSTALLED + OPERATIONAL** · 2026-10-05 · Hub: `C:\Users\fight\AppData\Local\hermes` (v0.21.5)

## What it is
RUDR9 (`github.com/Ardha-Eco-System/RUDR9`, MIT, by Ardha Studios) transforms a Hermes install into a 9-role dev org: **Default = CTO/orchestrator** + 7 worker profiles (planner, architect, vcm, builder, security, performance, reviewer). Coordination via Hermes Kanban; authority enforced by per-profile tool restrictions + `rudr9-guard` plugin. PAUL-style artifacts (SPEC/ARD/STATE/SUMMARY).

## Install record
- Pinned commit: `e69e16ea2e39963fd23bdc7a3325e02ea4f1f19b` (head of main, 2026-07-15). Cloned to scratch `...\cache\scratch\RUDR9` (pruned after 24h — re-clone for uninstall).
- **HERMES_HOME override required**: installer defaults to `$HOME/.hermes` (phantom tree). Ran with `HERMES_HOME="C:/Users/fight/AppData/Local/hermes" HERMES_PROFILE=default bash install.sh`.
- Script timed out mid-Phase 6 (180s); completed manually: 3 remaining `kanban.*` config sets + Phase 7 (hook+plugin) + verification. All phases verified after.
- Pre-install snapshot: `config.yaml.rudr9-preinstall-20261005-223958.bak` (kept).
- Installer tested by author on Hermes v0.18.2; this box v0.21.5 — all commands verified working (one flag drift: `profile create --clone` clones from ACTIVE profile in v0.21 → pinned via `HERMES_PROFILE=default`).

## Verified artifacts (2026-10-05)
- 7 profiles created (cloned from default; config/.env/SOUL/skills; channels NOT cloned). All "running" in gateway.
- 8 SOUL.md role files written; **default SOUL backed up** → `SOUL.md.rudr9-backup` (2420 B).
- Toolsets (via `hermes -p X tools list`): default/planner/architect/security/performance/reviewer = file+terminal **disabled**; vcm = file disabled (terminal on); builder = full.
- Ponytail skill present on all 7 profiles (root already had it; clones inherited).
- MCP configs (all `enabled: false` at install): context7 → architect+builder; github → default+vcm+reviewer. All 8 configs parse as valid YAML.
- Kanban config: `orchestrator_profile=default`, `auto_decompose=false`, `dispatch_in_gateway=true`, `failure_limit=2`, `max_in_progress=3`, `max_in_progress_per_profile=1`. Existing board data preserved (3 pre-existing blocked tasks intact).
- `rudr9-guard` plugin **enabled** (gateway reports hooks active; guard allows unknown profiles → leonard/jimmy/verimail unaffected). Long-task hook installed (inert unless TELEGRAM_BOT_TOKEN envs set; alerts at iteration 15 only).

## Model wiring (the "7 models" concern)
- **One model serves all 8 profiles** — roles are profiles, not subscriptions.
- All local/tailnet endpoints were DOWN at install time (freetoken 1919, omniroute 20128, llama-cpp 1920, brother-5090 8084) — OpenRouter was the only live path.
- Set all 8 profiles: `model.provider: or` (OpenRouter, key `${OPENROUTER_API_KEY}` already in cloned .env) + `model.default: deepseek/deepseek-v4-flash-0731`. Read-back verified on all 8. Smoke test on builder → `SMOKE-OK`.
- Later upgrades: per-role `hermes -p <role> config set model.default deepseek/deepseek-v4-pro` etc. — still not 7 models.

## Post-install fixes
- **Context7 MCP enabled** on architect + builder (keyless free tier) — verified `✓ enabled` on both (2026-10-05).

## Open / blocked
- **GitHub MCP (default/vcm/reviewer) + VCM GitHub flow: BLOCKED on a GitHub PAT.** None exists on this machine (vault has only `GITEA_TOKEN` in `Documents\Vault\gitea-access.txt`). Tony must create a PAT and add `GITHUB_PERSONAL_ACCESS_TOKEN=...` to `Documents\Vault\tokens_system.txt`; then wire to the 3 profiles' .env + `hermes -p X mcp enable github`. Key never in chat.
- `gh` CLI not installed (optional — GitHub MCP covers PRs once token exists).
- Local model endpoints still down (user-side: FreeToken GUI, omniroute, 3060 llama.cpp at 1920 — do not start 3060 server without approval).
- Hermes 1570 commits behind upstream (separate decision; needs explicit go — restarts gateway).

## GrokBot / Grok collaboration
- File loop: `C:\Users\fight\Documents\AgentOS` is a working clone of Gitea `Tony_tech/personal-agent-os` (remote `gitea.vps1.afterthedemo.com/Tony_tech/personal-agent-os.git`). Skill `agent-comms-file-loop` documents the convention (`agent-comms/grok-inbox/`, `leonard-to-grok-*.md` / `grok-to-leonard-*.md`); no grok-inbox dir found locally yet (may live only in the remote repo — check Gitea first).
- Grok↔Leonard test messages exist (2026-08-28): test-grok-leonard-message*.md, grok-leonard-response.md.
- `grok-acp` plugin in Hermes catalog (`hermes-grok-acp`, community tier): xAI Grok subscription as a Hermes model provider over ACP stdio (spawns `grok` CLI on PATH; no API key stored). Not installed.

## Uninstall / reversibility
`HERMES_HOME="C:/Users/fight/AppData/Local/hermes" bash install.sh --uninstall` (from cloned repo) → deletes 7 profiles, re-enables default file+terminal, restores `SOUL.md` from backup, removes hook+plugin. Kanban data preserved.

## Runbook
1. Restart desktop app if new profiles missing from switcher.
2. Talk to **default (CTO)** profile with a feature request → it decomposes into kanban tasks → roles execute (sequential by default).
3. Monitor: `hermes kanban list` / desktop board.