hermes/cto
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Select Qwen local as CTO provider policy

Browse Source
This commit is contained in:
Svrnty
2026-05-31 22:13:52 -04:00
parent ebcb2c96f1
commit d9edf8a715
8 changed files with 90 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tools/validate_cto_child.py
+32 -32
View File
@@ -468,7 +468,7 @@ REQUIRED_MODEL_PROVIDER_ADMISSION_ISSUE_PHRASES = [
"Admission JSON has `allowed_network_class`: `codex-oauth-hosted-model-plus-local-vllm-fallback`.",
"Admission JSON has `approval_source`: `JP chat approval on 2026-05-31`.",
"Admission JSON contains no secret keys or secret values.",
"Fallback to `vllm` / `qwen3.6-35b-a3b` remains explicit decision-record context and must be represented in runtime evidence before it may count as a Case provider/model path.",
"Fallback to `openai-codex` / `gpt-5.5` remains explicit decision-record context and must be represented in runtime evidence before it may count as a Case provider/model path.",
"`CTO-WORK-020` remains blocked until real Case Stage 2 produces a Harness Evidence Interface pass report using this admission file.",
"Real Case Stage 2 command must set `CTO_HARNESS_CASE_MODEL_ADMISSION_FILE` to this admission JSON path.",
]
@@ -493,7 +493,7 @@ REQUIRED_QWEN_LOCAL_ADMISSION_JSON = {
REQUIRED_LOCAL_PROVIDER_ROUTE_PRD_PHRASES = [
"Local planning SOT only. Not a Core Protocol. Not active Core authority.",
"`CTO-WORK-020` remains blocked until a provider policy decision exists.",
"`CTO-WORK-020` remains blocked until the selected local Qwen provider path produces real Case Stage 2 pass evidence.",
"`decision_status=local_provider_required`",
"local_case_compatible",
"CTO-WORK-020` admission JSON gate as authority",
@@ -548,7 +548,7 @@ REQUIRED_PROVIDER_DECISION_PACKET_PRD_PHRASES = [
"`CTO-WORK-020` is blocked by a provider policy decision.",
"`external_provider_approved`",
"`local_provider_required`",
"`not_decided` as the current safe state",
"`local_provider_required` as the current selected state",
"does not approve a provider/model",
"does not approve or admit any provider/model",
"is not Stage 2 pass evidence",
@@ -558,7 +558,7 @@ REQUIRED_PROVIDER_DECISION_PACKET_PRD_PHRASES = [
"CTO_HARNESS_CASE_MODEL_ADMISSION_FILE",
"exact provider/model, approval source, credential source class, allowed network class, review trigger, and evidence expectations",
"no secret value in SOT, task file, argv, report, trace, backend logs, generated config, or commit",
"`CTO-WORK-022` blocked unless `decision_status=local_provider_required`",
"`CTO-WORK-022` blocked until explicit local provider config is supplied and real Case Stage 2 pass evidence exists",
"real Case Stage 2 blocked unless a provider/model is admitted and a pass report exists through the Harness Evidence Interface",
"no Target Repository path may be inspected or copied",
"`provider_class`: `external_anthropic`",
@@ -581,7 +581,7 @@ REQUIRED_PROVIDER_DECISION_PACKET_ISSUE_IDS = [
REQUIRED_PROVIDER_DECISION_PACKET_ISSUE_PHRASES = [
"Status: validated.",
"`not_decided` is current safe state",
"`local_provider_required` is current selected state",
"`external_provider_approved`",
"`local_provider_required`",
"does not approve or admit any provider/model",
@@ -592,14 +592,14 @@ REQUIRED_PROVIDER_DECISION_PACKET_ISSUE_PHRASES = [
"Keeps `CTO_HARNESS_CASE_MODEL_ADMISSION_FILE` as execution admission gate.",
"Requires exact provider/model, approval source, credential source class, allowed network class, review trigger, and evidence expectations before admission.",
"Requires no secrets in SOT, task file, argv, report, trace, backend logs, generated config, or commits.",
"States `CTO-WORK-022` stays blocked unless `decision_status=local_provider_required`.",
"States `CTO-WORK-022` stays blocked until explicit local provider config and real Case Stage 2 pass evidence exist.",
"States real Case Stage 2 remains blocked until admitted provider/model and Harness Evidence Interface pass report exist.",
"States no Target Repository path may be inspected or copied.",
"Decision record selects exactly one branch: `external_provider_approved` or `local_provider_required`.",
"Decision record is structured and uses only `not_decided`, `external_provider_approved`, or `local_provider_required`.",
"Decision record references existing evidence paths and commits instead of copying runtime evidence.",
"`CTO-WORK-020` remains blocked until admitted provider/model and real Stage 2 pass report exist.",
"`CTO-WORK-022` remains blocked unless `decision_status=local_provider_required`.",
"`CTO-WORK-022` remains blocked until explicit local provider config and real Case Stage 2 pass evidence exist.",
"Real Case Stage 2 remains blocked unless `CTO_HARNESS_CASE_MODEL_ADMISSION_FILE` exists and matches `CTO_HARNESS_CASE_MODEL_PROVIDER` and `CTO_HARNESS_CASE_MODEL`.",
"Decision record has `decision_status`: `not_decided`.",
"Provider class, provider, model, approval source, credential source class, allowed network class, and review trigger remain empty while blocked.",
@@ -614,52 +614,52 @@ REQUIRED_PROVIDER_DECISION_PACKET_ISSUE_PHRASES = [
"Record keeps `CTO-WORK-022` blocked unless `decision_status=local_provider_required`.",
"Record keeps real Case Stage 2 blocked until admitted provider/model and Harness Evidence Interface pass report exist.",
"Status: validated.",
"Record JP approval of the external provider decision branch for the current Hermes model stack.",
"Decision record has `decision_status`: `external_provider_approved`.",
"Decision record has `provider_class`: `external_openai_codex`.",
"Decision record has `provider`: `openai-codex`.",
"Decision record has `model`: `gpt-5.5`.",
"Decision record has `fallback_provider`: `vllm`.",
"Decision record has `fallback_model`: `qwen3.6-35b-a3b`.",
"Decision record has `credential_source_class`: `hermes-openai-codex-oauth-and-local-vllm-config`; no secret value.",
"Decision record has `allowed_network_class`: `codex-oauth-hosted-model-plus-local-vllm-fallback`.",
"Record JP approval of the local Qwen primary provider decision branch for the current Hermes model stack.",
"Decision record has `decision_status`: `local_provider_required`.",
"Decision record has `provider_class`: `local_case_compatible`.",
"Decision record has `provider`: `qwen-local`.",
"Decision record has `model`: `qwen3.6-35b-a3b`.",
"Decision record has `fallback_provider`: `openai-codex`.",
"Decision record has `fallback_model`: `gpt-5.5`.",
"Decision record has `credential_source_class`: `pi-models-json-local-provider-no-secret-plus-codex-oauth-fallback`; no secret value.",
"Decision record has `allowed_network_class`: `local-tailscale-vllm-spark1-plus-codex-oauth-fallback`.",
"Decision record references Hermes model policy and local Hermes config as evidence sources without copying secrets.",
"Record says `CTO-WORK-024` is resolved by selecting `external_provider_approved`.",
"Record says `CTO-WORK-024` is resolved by selecting `local_provider_required`.",
"Record keeps `CTO-WORK-020` blocked until admission JSON and real Stage 2 pass evidence exist.",
"Record keeps `CTO-WORK-022` blocked because `decision_status=external_provider_approved`, not `local_provider_required`.",
"Record requires fallback to `vllm` with `qwen3.6-35b-a3b` to be explicit in admission evidence before it may count as a Case provider/model path.",
"Record keeps `CTO-WORK-022` blocked until explicit local provider config and real Case Stage 2 pass evidence exist.",
"Record requires fallback to `openai-codex` with `gpt-5.5` to be explicit in admission evidence before it may count as a Case provider/model path.",
]
REQUIRED_PROVIDER_DECISION_RECORD_PHRASES = [
"Local planning SOT only. Not a Core Protocol. Not active Core authority.",
"`decision_status`: `external_provider_approved`.",
"`provider_class`: `external_openai_codex`.",
"`provider`: `openai-codex`.",
"`model`: `gpt-5.5`.",
"`fallback_provider`: `vllm`.",
"`fallback_model`: `qwen3.6-35b-a3b`.",
"`decision_status`: `local_provider_required`.",
"`provider_class`: `local_case_compatible`.",
"`provider`: `qwen-local`.",
"`model`: `qwen3.6-35b-a3b`.",
"`fallback_provider`: `openai-codex`.",
"`fallback_model`: `gpt-5.5`.",
"`approval_source`: JP chat approval on 2026-05-31.",
"`credential_source_class`: `hermes-openai-codex-oauth-and-local-vllm-config`; no secret value.",
"`allowed_network_class`: `codex-oauth-hosted-model-plus-local-vllm-fallback`.",
"`credential_source_class`: `pi-models-json-local-provider-no-secret-plus-codex-oauth-fallback`; no secret value.",
"`allowed_network_class`: `local-tailscale-vllm-spark1-plus-codex-oauth-fallback`.",
"`review_trigger`: before real Case Stage 2 admission JSON is written, before any credential source change, and before any default/fallback model change.",
"/home/svrnty/workspaces/hermes/scripts/apply-hermes-model-policy.py",
"/home/svrnty/.hermes/config.yaml",
"`effect`: `CTO-WORK-020 remains blocked until admitted provider/model and real Stage 2 pass report exist`.",
"`external_provider_approved` means JP approved the provider decision branch for the existing Hermes model stack: `openai-codex` with model `gpt-5.5` as primary, and `vllm` with model `qwen3.6-35b-a3b` as fallback.",
"`local_provider_required` means JP approved the provider decision branch for the existing Hermes model stack: `qwen-local` with model `qwen3.6-35b-a3b` as primary, and `openai-codex` with model `gpt-5.5` as fallback.",
"This record is not provider/model admission and is not Stage 2 pass evidence.",
"`CTO-WORK-024` is resolved by this record selecting `external_provider_approved`.",
"`CTO-WORK-024` is resolved by this record selecting `local_provider_required`.",
"Previous state:",
"`decision_status`: `not_decided`.",
"`not_decided` means no provider/model may run.",
"Only JP or a governed Core route may change this record away from `external_provider_approved`.",
"Only JP or a governed Core route may change this record away from `local_provider_required`.",
"Allowed future values remain `external_provider_approved` or `local_provider_required`.",
"No secret value may appear in SOT, task file, argv, report, trace, backend logs, generated config, or commit.",
"No Target Repository path may be inspected or copied.",
"`CTO-WORK-020` remains provider/model admission authority.",
"`CTO_HARNESS_CASE_MODEL_ADMISSION_FILE` remains execution admission gate.",
"`CTO-WORK-022` remains blocked because `decision_status=external_provider_approved`, not `local_provider_required`.",
"`CTO-WORK-022` remains blocked until explicit local provider config is supplied and real Case Stage 2 pass evidence exists.",
"Real Case Stage 2 remains blocked until admitted provider/model and Harness Evidence Interface pass report exist.",
"Fallback to `vllm` with `qwen3.6-35b-a3b` must be explicit in admission evidence before it may count as a Case provider/model path.",
"Fallback to `openai-codex` with `gpt-5.5` must be explicit in admission evidence before it may count as a Case provider/model path.",
"Existing evidence paths and commits are referenced only; runtime evidence is not copied into this record.",
]