clawdie/hermes-bsd
Template
Watch
1
0
Fork
You've already forked hermes-bsd
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

docs: define clawdie-gatekeeper architecture and update FreeBSD vault plan #1

Merged
clawdie merged 3 commits from docs/clawdie-gatekeeper-spec into main 2026-09-23 11:57:18 +02:00
Conversation 0 Commits 3 Files changed 2 +212 -9
clawdie commented 2026-09-23 11:53:05 +02:00
Owner
Copy link

Summary

  1. docs/security/clawdie-gatekeeper.md: Defines the clawdie-gatekeeper architecture using Jev (TypeSafe AI System One decision model), formalizing the 6-question typed schema, Clawdie security tiers (sandbox-safe, project-write, host-admin), hostd non-root routing, sub-2ms watchdog status socket probe, and the FreeBSD Vaultwarden jail lifecycle (fail-closed sentinel, active readiness probe loop, decoupled storage).
  2. CLAWDIE-PLAN.md: Updates the Open Work ledger to record that the Vaultwarden master password is verified working on debby, sets the migration path to FreeBSD (valhala testbed -> osa), and adds clawdie-gatekeeper to the active operating roadmap.
  3. Hook integration: Conforms to Hermes extension architecture via either external shell hook script (scripts/clawdie-gatekeeper-hook.py targeting terminal and execute_code) or in-process plugin (plugins/clawdie-gatekeeper/) without mutating core.
## Summary 1. **`docs/security/clawdie-gatekeeper.md`**: Defines the `clawdie-gatekeeper` architecture using Jev (TypeSafe AI System One decision model), formalizing the 6-question typed schema, Clawdie security tiers (`sandbox-safe`, `project-write`, `host-admin`), `hostd` non-root routing, sub-2ms watchdog status socket probe, and the FreeBSD Vaultwarden jail lifecycle (fail-closed sentinel, active readiness probe loop, decoupled storage). 2. **`CLAWDIE-PLAN.md`**: Updates the Open Work ledger to record that the Vaultwarden master password is verified working on debby, sets the migration path to FreeBSD (`valhala` testbed -> `osa`), and adds `clawdie-gatekeeper` to the active operating roadmap. 3. **Hook integration**: Conforms to Hermes extension architecture via either external shell hook script (`scripts/clawdie-gatekeeper-hook.py` targeting `terminal` and `execute_code`) or in-process plugin (`plugins/clawdie-gatekeeper/`) without mutating core.
fix(docs): correct clawdie-gatekeeper hook signatures and integration mechanisms
Some checks failed
CI / Check contributors (pull_request) Has been cancelled
Details
CI / Check uv.lock (pull_request) Has been cancelled
Details
CI / Check no committed infographics (pull_request) Has been cancelled
Details
CI / package-lock.json diff (pull_request) Has been cancelled
Details
CI / Lint Docker scripts (pull_request) Has been cancelled
Details
CI / Build&Test Docker image (pull_request) Has been cancelled
Details
CI / Supply-chain scan (pull_request) Has been cancelled
Details
CI / Review label gate (pull_request) Has been cancelled
Details
CI / CI review comment (live) (pull_request) Has been cancelled
Details
CI / All required checks pass (pull_request) Has been cancelled
Details
CI / CI timing report (pull_request) Has been cancelled
Details
CI / Generate slices (pull_request) Has been cancelled
Details
CI / save-durations (pull_request) Has been cancelled
Details
CI / e2e (pull_request) Has been cancelled
Details
CI / List npm workspaces (pull_request) Has been cancelled
Details
CI / PowerShell installer tests (pull_request) Has been cancelled
Details
CI / Playwright E2E (Linux) (pull_request) Has been cancelled
Details
CI / docs-site-checks (pull_request) Has been cancelled
Details
CI / check-common-ancestor (pull_request) Has been cancelled
Details
CI / check-attribution (pull_request) Has been cancelled
Details
CI / uv lock --check (pull_request) Has been cancelled
Details
CI / check-no-committed-infographics (pull_request) Has been cancelled
Details
CI / package-lock.json semantic diff (pull_request) Has been cancelled
Details
CI / Lint Dockerfile (hadolint) (pull_request) Has been cancelled
Details
CI / Lint docker/ shell scripts (shellcheck) (pull_request) Has been cancelled
Details
CI / build (amd64, type=gha,scope=docker-amd64, type=gha,mode=max,scope=docker-amd64, linux/amd64, ubuntu-latest) (pull_request) Has been cancelled
Details
CI / build (arm64, type=gha,scope=docker-arm64, type=gha,mode=max,scope=docker-arm64, linux/arm64, ubuntu-24.04-arm) (pull_request) Has been cancelled
Details
CI / publish (amd64, type=gha,scope=docker-amd64, type=gha,mode=max,scope=docker-amd64, linux/amd64, ubuntu-latest) (pull_request) Has been cancelled
Details
CI / publish (arm64, type=gha,scope=docker-arm64, type=gha,mode=max,scope=docker-arm64, linux/arm64, ubuntu-24.04-arm) (pull_request) Has been cancelled
Details
CI / merge (pull_request) Has been cancelled
Details
7e9470b7ad
docs: fix gatekeeper shell-hook key and plugin entry file
Some checks failed
CI / Check contributors (pull_request) Has been cancelled
Details
CI / Check uv.lock (pull_request) Has been cancelled
Details
CI / Check no committed infographics (pull_request) Has been cancelled
Details
CI / package-lock.json diff (pull_request) Has been cancelled
Details
CI / Lint Docker scripts (pull_request) Has been cancelled
Details
CI / Build&Test Docker image (pull_request) Has been cancelled
Details
CI / Supply-chain scan (pull_request) Has been cancelled
Details
CI / Review label gate (pull_request) Has been cancelled
Details
CI / CI review comment (live) (pull_request) Has been cancelled
Details
CI / All required checks pass (pull_request) Has been cancelled
Details
CI / CI timing report (pull_request) Has been cancelled
Details
CI / Generate slices (pull_request) Has been cancelled
Details
CI / save-durations (pull_request) Has been cancelled
Details
CI / e2e (pull_request) Has been cancelled
Details
CI / List npm workspaces (pull_request) Has been cancelled
Details
CI / PowerShell installer tests (pull_request) Has been cancelled
Details
CI / Playwright E2E (Linux) (pull_request) Has been cancelled
Details
CI / docs-site-checks (pull_request) Has been cancelled
Details
CI / check-common-ancestor (pull_request) Has been cancelled
Details
CI / check-attribution (pull_request) Has been cancelled
Details
CI / uv lock --check (pull_request) Has been cancelled
Details
CI / check-no-committed-infographics (pull_request) Has been cancelled
Details
CI / package-lock.json semantic diff (pull_request) Has been cancelled
Details
CI / Lint Dockerfile (hadolint) (pull_request) Has been cancelled
Details
CI / Lint docker/ shell scripts (shellcheck) (pull_request) Has been cancelled
Details
CI / build (amd64, type=gha,scope=docker-amd64, type=gha,mode=max,scope=docker-amd64, linux/amd64, ubuntu-latest) (pull_request) Has been cancelled
Details
CI / build (arm64, type=gha,scope=docker-arm64, type=gha,mode=max,scope=docker-arm64, linux/arm64, ubuntu-24.04-arm) (pull_request) Has been cancelled
Details
CI / publish (amd64, type=gha,scope=docker-amd64, type=gha,mode=max,scope=docker-amd64, linux/amd64, ubuntu-latest) (pull_request) Has been cancelled
Details
CI / publish (arm64, type=gha,scope=docker-arm64, type=gha,mode=max,scope=docker-arm64, linux/arm64, ubuntu-24.04-arm) (pull_request) Has been cancelled
Details
CI / merge (pull_request) Has been cancelled
Details
8abd756ba2 
- Pattern A: the shell-hook entry key is 'command' (not 'path');
  entries without a non-empty 'command' are warn-and-dropped.
- Pattern B: the plugin loader requires '<name>/__init__.py' with
  register(ctx) plus a sibling plugin.yaml; 'plugin.py' does not load.
clawdie deleted branch docs/clawdie-gatekeeper-spec 2026-09-23 11:57:18 +02:00
clawdie referenced this pull request from a commit 2026-10-20 12:29:48 +02:00
Add Hermes desktop app (#20059)
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
clawdie/hermes-bsd!1
No description provided.