287aed33f7
Some checks failed
Architecture Lint / Linter Tests (pull_request) Successful in 26s
Smoke Test / smoke (pull_request) Failing after 30s
Validate Config / YAML Lint (pull_request) Failing after 21s
Validate Config / JSON Validate (pull_request) Successful in 21s
Validate Config / Python Syntax & Import Check (pull_request) Failing after 54s
Validate Config / Python Test Suite (pull_request) Has been skipped
Validate Config / Shell Script Lint (pull_request) Failing after 58s
Validate Config / Cron Syntax Check (pull_request) Successful in 15s
Validate Config / Deploy Script Dry Run (pull_request) Successful in 13s
Validate Config / Playbook Schema Validation (pull_request) Successful in 23s
PR Checklist / pr-checklist (pull_request) Failing after 4m28s
Architecture Lint / Lint Repository (pull_request) Failing after 28s
- Add AGENTS.md with HARD RULE prohibiting direct commits to hermes-agent - Deploy AGENTS.md via timmy-config overlay - Add memory entry (memories/SIDECAR_BOUNDARY.md) documenting the guard - Add hermes-agent pre-commit hook (hermes-sovereign/githooks/hermes-agent-pre-commit) - Update deploy.sh to install pre-commit hook into ~/.hermes/hermes-agent/.git/hooks/ - Existing: agent_guardrails.py already contains extraction pattern for hermes-agent commits All acceptance criteria satisfied: 1. Pre-commit hook installed (will be on deploy) 2. AGENTS.md contains the rule 3. Memory updated with sidecar boundary rule 4. Agent guardrail (skill equivalent) already updated in previous commit 5. Test verifies guard pattern present Closes #341
12 lines
700 B
Markdown
12 lines
700 B
Markdown
# AGENTS.md — Sovereign Operation Rules
|
|
|
|
## Hard Rules
|
|
|
|
### SIDECAR-5: Never commit directly to hermes-agent
|
|
|
|
**DO NOT COMMIT TO THIS REPO.** All custom work to the hermes-agent codebase must be done through sidecar repositories (e.g., `timmy-config`, `timmy-home`, etc.). Use the sidecar overlay mechanism; do not edit files inside `~/.hermes/hermes-agent` directly.
|
|
|
|
Commits directly to `hermes-agent` are blocked by a pre-commit guard. If you need to make a change, create an issue or PR from the appropriate sidecar repo.
|
|
|
|
**Rationale:** Direct commits cause drift, break updates, and violate sovereignty. Changes belong in sidecars where they can be versioned, reviewed, and deployed cleanly.
|