- SOUL.md: rewritten identity — Linux/Docker for reach, FreeBSD/jails for resilience. A vulnerability that kills one OS won't kill the other. - AGENTS.md: agent matrix now includes isolation column (Docker/Bastille) - memories/curated/project-structure.md: dual-OS strategy table - verify_facts_probe.py: proper Docker detection (socket check, daemon status) We are not betting on one OS. We are betting that catastrophic events won't hit both platforms simultaneously.
4.1 KiB
Layered Soul Agent Rules
- Do not commit secrets, API keys, auth tokens, browser profiles, or raw credential files.
- Do not import raw sessions into another harness by default.
- Curate memories before adding them under
memories/curated/. - Keep Hermes-native runtime configuration in
hermes-soul; this repository is the cross-harness contract. - Public examples may reference private source repositories by URL/name, but must not quote or copy their private contents.
- Use
scripts/layered_soul.py validate .before committing structural changes. - When adapting for Colibri: reviewed skills map to
system_skills, curated memory maps tosystem_brain, converted task manifests map tosystem_ops. - When adapting for Hermes (upstream, Linux): load as profile context (SOUL.md + USER.md + IDENTITY.md). Hermes-native config and cron stay in
hermes-soul. - When adapting for Autolycus (Hermes fork, FreeBSD): same profile-context load; FreeBSD-specific gaps (voice, clipboard) are known and tracked in
docs/CLAWDIE-HERMES-FREEBSD-INTEGRATION.md. - When adapting for Pi/Codex/Claude Code/Zot: render the prompt bundle (
render-prompt) and inject as task-scoped context. Durable findings flow back through reviewed commits.
Quota exhaustion policy (cross-harness)
When any agent hits an API quota limit (429 / rate-limit):
-
Calculate reset time with
scripts/quota_reset_eta.py— parses provider error messages and converts to UTC/CEST correctly. Handles Beijing time (Z.AI/DeepSeek), UTC (OpenRouter), and PDT (Anthropic/OpenAI). -
Check if task already resolved with
scripts/task_dedup_before_retry.py— queries Colibri task board, checks git activity since block time. Skips retry if another agent or operator already completed the work. -
Schedule retry — create a one-shot cron at reset time + 60s buffer. Never retry immediately (429 means quota, not transient).
-
Report — log to glasspane: provider, reset time, task status, action taken.
Rule: never retry a quota-blocked task without checking whether it was already solved. Tokens are money. A solved task retried is waste.
Active infrastructure
- Forgejo: code.smilepowered.org (SSH port 2222)
- Vaultwarden: vault.smilepowered.org (SSL)
- Tailscale: debby=100.66.193.10, domedog=100.103.255.41, osa=100.72.229.63
- Commit identity:
hello@clawdie.sifor all project commits
Agent matrix (5 agents across 3 hosts, 2 OS families)
| Agent | Host | Harness | OS | Isolation | Role |
|---|---|---|---|---|---|
| Hermes | debby | Hermes Agent (upstream) | Debian 13 | Docker | Orchestrator, soul backup |
| Zot | debby | Zot RPC | Debian 13 | Docker | Coding, media workflows |
| Claude | domedog | Claude Code | Linux | Docker | Verification, review |
| Codex | osa | Codex CLI | FreeBSD 15 | Bastille jail | ISO builds, validation |
| Autolycus | osa | Hermes Agent (fork) | FreeBSD 15 | Bastille jail | Native FreeBSD Hermes |
Survivability: Linux/Docker and FreeBSD/jails are complementary safeguards. A vulnerability that kills one platform cannot kill the other. Agents can be relocated across platforms in minutes via layered-soul identity injection.
Private sources
hermes-soul: git@code.smilepowered.org:clawdie/hermes-soul.git (private, operator access only)hermes-bsd: git@code.smilepowered.org:clawdie/hermes-bsd.git (public, MIT-licensed FreeBSD patches)clawdie-ai: git@code.smilepowered.org:clawdie/clawdie-ai.git (private)clawdie-iso: git@code.smilepowered.org:clawdie/clawdie-iso.git (private)
Quick reference
# Validate
python3 scripts/layered_soul.py validate .
# See what's available from hermes-soul
python3 scripts/layered_soul.py plan-private-source \
examples/private-sources/hermes-soul.example.json \
--source-root ~/hermes-soul
# Render for a harness
python3 scripts/layered_soul.py render-prompt . --output /tmp/soul-prompt.md