layered-soul/memories/curated/agent-roster.md
Sam & Claude a5139b5f7f security(docs): mask Tailscale IPs + bot handles behind fleet.env
Real tailnet IPs and Telegram bot handles were being committed in docs/
memories/skills. Scrubbed all tracked markdown to ${VAR} placeholders; real
values now live in fleet.env (gitignored) and stay live via 'tailscale status'.

- add fleet.env.example (committed) + fleet.env (gitignored); .gitignore *.env
- AGENTS.md + HOST-MATRIX: masking convention so it can't recur
- also: domedog registered as Colibri agent (image-render/ffmpeg/build lane);
  correct CAPABILITY-ROUTING example to real registered caps (domedog headless)

Past commits not rewritten (history moves to Codeberg at v1.0); this fixes HEAD.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-19 18:19:32 +02:00

2.6 KiB

Agent Roster

Active agents

Agent Home Host Harness Model Role
Hermes debby (Debian 13) Hermes Agent DeepSeek v4 Orchestrator, primary dev agent, soul backup
Zot debby (Debian 13) Zot RPC GLM-5.1 Coding specialist, media workflows
Claude domedog (Linux) Claude Code Claude Independent verification, secondary builder, reviewer
Codex osa (FreeBSD 15) Codex CLI GPT FreeBSD 15 validation, ISO builds, hardware proofs
hermes-osa osa (FreeBSD 15) Hermes Agent (FreeBSD) TBD Native FreeBSD Hermes instance, ISO-side agent

Multi-agent groups

Group Platform Members Purpose
"My Debby" Telegram ${HERMES_BOT} + ${ZOT_BOT} Orchestration + coding delegation
FreeBSD side OSA host Codex + hermes-osa ISO builds, validation, native FreeBSD ops

Harness matrix

Harness Hosts Native OS Capabilities
Hermes Agent (upstream) debby Linux Full agent, skills, cron, Telegram gateway, voice
Hermes Agent (FreeBSD) osa FreeBSD 15 Clean-room MIT FreeBSD layer (hermes-bsd); service hermes_daemon, PTY/local terminal
Zot RPC debby Linux Structured delegation, GLM-5.1 inference
Claude Code domedog Linux Verification, code review, document review
Codex CLI osa FreeBSD 15 ISO builds, cargo test, hardware validation

Secrets

All agent API keys live in Vaultwarden at vault.smilepowered.org. Bootstrap credentials (BW_CLIENTID, BW_CLIENTSECRET, BW_PASSWORD) are the only secrets in .env files — everything else is fetched from the vault at runtime.

Verification

Claude (domedog) independently verifies Hermes's claims — test counts, clippy status, crate counts. Do not overstate results. Use exact cargo test --workspace output.