Files
timmy-config/scripts
Rockachopa ca27e3f214
Some checks failed
Smoke Test / smoke (pull_request) Failing after 23s
Architecture Lint / Linter Tests (pull_request) Successful in 27s
Validate Config / YAML Lint (pull_request) Failing after 18s
Validate Config / JSON Validate (pull_request) Successful in 20s
Validate Config / Python Syntax & Import Check (pull_request) Failing after 58s
Validate Config / Python Test Suite (pull_request) Has been skipped
Validate Config / Shell Script Lint (pull_request) Failing after 1m1s
Validate Config / Cron Syntax Check (pull_request) Successful in 10s
Validate Config / Deploy Script Dry Run (pull_request) Successful in 12s
Validate Config / Playbook Schema Validation (pull_request) Successful in 27s
Architecture Lint / Lint Repository (pull_request) Failing after 23s
PR Checklist / pr-checklist (pull_request) Successful in 3m4s
feat(webhook): GEMINI-HARDEN-04 — authenticated webhook runner\n\nReplace print-only payload parser with production-hardened receiver:\n - HMAC-SHA256 signature verification (X-Gitea-Signature)\n - Event / repo / branch / action allowlists (config + env driven)\n - Idempotent event processing via X-Gitea-Delivery with TTL state file\n - Structured JSON logging (stdout + optional file)\n - Safe dispatch — pre-approved script invocations only, no arbitrary shell\n\nNew files:\n - scripts/webhook_runner.py — main HTTP server + policy engine\n - scripts/webhook_config.yaml — sample configuration\n - tests/test_webhook_runner.py — 40 pytest unit tests\n - tests/fixtures/webhook/*.json — payload fixtures for push/PR/issue\n\nAcceptance criteria:\n ✓ Verify Gitea webhook secret/signature\n ✓ Event, repo, branch, and action allowlists explicit and config-driven\n ✓ No direct git pull, shell execution, or fleet mutation from payload fields\n ✓ Structured logging with accepted/rejected events\n ✓ Idempotency via X-Gitea-Delivery tracking\n ✓ Local test fixtures: push, PR, issue, invalid-signature, unknown-event\n ✓ Deployment notes: config via env vars or scripts/webhook_config.yaml\n\nCloses #436
2026-04-27 09:36:27 -04:00
..
2026-04-08 11:40:05 +00:00
2026-04-08 11:40:19 +00:00
2026-04-08 11:40:45 +00:00

Gemini Sovereign Infrastructure Suite

This directory contains the core systems of the Gemini Sovereign Infrastructure, designed to systematize fleet operations, governance, and architectural integrity.

Principles

  1. Systems, not Scripts: We build frameworks that solve classes of problems, not one-off fixes.
  2. Sovereignty First: All tools are designed to run locally or on owned VPSes. No cloud dependencies.
  3. Von Neumann as Code: Infrastructure should be self-replicating and automated.
  4. Continuous Governance: Quality is enforced by code (linters, gates), not just checklists.

Tools

[OPS] Provisioning & Fleet Management

  • provision_wizard.py: Automates the creation of a new Wizard node from zero.
    • Creates DigitalOcean droplet.
    • Installs and builds llama.cpp.
    • Downloads GGUF models.
    • Sets up systemd services and health checks.
  • fleet_llama.py: Unified management of llama-server instances across the fleet.
    • status: Real-time health and model monitoring.
    • restart: Remote service restart via SSH.
    • swap: Hot-swapping GGUF models on remote nodes.
  • skill_installer.py: Packages and deploys Hermes skills to remote wizards.
  • model_eval.py: Benchmarks GGUF models for speed and quality before deployment.
  • phase_tracker.py: Tracks the fleet's progress through the Paperclips-inspired evolution arc.
  • cross_repo_test.py: Verifies the fleet works as a system by running tests across all core repositories.
  • self_healing.py: Auto-detects and fixes common failures across the fleet.
  • agent_dispatch.py: Unified framework for tasking agents across the fleet.
  • telemetry.py: Operational visibility without cloud dependencies.
  • gitea_webhook_handler.py: Handles real-time events from Gitea to coordinate fleet actions.

[ARCH] Governance & Architecture

  • architecture_linter_v2.py: Automated enforcement of architectural boundaries.
    • Enforces sidecar boundaries (no sovereign code in hermes-agent).
    • Prevents hardcoded IPs and committed secrets.
    • Ensures SOUL.md and README.md standards.
  • adr_manager.py: Streamlines the creation and tracking of Architecture Decision Records.
    • new: Scaffolds a new ADR from a template.
    • list: Provides a chronological view of architectural evolution.

Usage

Most tools require DIGITALOCEAN_TOKEN and SSH access to the fleet.

# Provision a new node
python3 scripts/provision_wizard.py --name fenrir --model qwen2.5-coder-7b

# Check fleet status
python3 scripts/fleet_llama.py status

# Audit architectural integrity
python3 scripts/architecture_linter_v2.py

Built by Gemini — The Builder, The Systematizer, The Force Multiplier.