8e8ced470b
Applies Wave-3 auto-approved recommendations per
sot/06-REGISTRY/audits/RECOMMENDATIONS-steev-2026-05-24.md.
HARD-RULE FIX:
- REMOVE bte MCP (inherit_mcp_toolsets: false + mcp_servers: []).
bte = Plan B marketing platform; steev/CLAUDE.md:14 forbids access.
Auto-approved REMOVE/DROP:
- 17 silently-inherited builtin skills denied (inherit_builtins: false).
- Skills allowlist narrowed to 6: steev-agent, proton-tools, google-workspace,
obsidian, himalaya, kanban-worker.
ADD (auto-approved):
- schema_version: 1
- inherit_builtins: false, inherit_mcp_toolsets: false
ADD (PAUSED-for-JP rows surfaced in DISCLOSURE.md §12):
- Personal-scope discriminators (scope/chat_facing/delegates_to/sovereign_only)
populated per audit §7d; values confirmation pending JP.
- 3 cred name-mismatches kept as-declared in manifest; rename decision deferred
(manifest vs vault vs bundle-indirection — W3.4 governance class).
- 4 manifest-declared MCP installs (mcp_proton_*, mcp_perplexity) not registered;
install ordering deferred.
Surface: 2 files only — steev/manifest.yaml + steev/DISCLOSURE.md.
sot-precommit --full-tree: EXIT 0.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
165 lines
7.6 KiB
YAML
165 lines
7.6 KiB
YAML
# Steev profile distribution manifest — machine-readable identity + install contract.
|
|
# Read by install.sh. Convention shared by all Hermes profile distributions
|
|
# (see ../sot/03-PROTOCOLS/PROFILE-DISTRIBUTION-PROTOCOL.md — the canonical protocol).
|
|
profile: steev # Hermes profile name (personal — no org suffix per FRAMEWORK §6.1)
|
|
kind: profile-distribution # family marker; steev = personal-assistant reference impl
|
|
role: personal-assistant # function — Chief of Staff for one principal (JP)
|
|
# org: ~ # intentionally omitted — steev is personal/agnostic
|
|
version: 1.0.0
|
|
identity: AGENT.md # WHO (role, mission, boundaries)
|
|
contract: CONTRACT.md # behavior contract — tier T1 (this file wins)
|
|
reference: docs/STEEV-MASTER.md # full operating source of truth
|
|
|
|
# Governance — owner + vision + rules linked to SOT (PROFILE-DISTRIBUTION-PROTOCOL §2.2).
|
|
# Steev is JP-scoped personal; no brand_master_ref (not org-bound).
|
|
governance:
|
|
org: personal
|
|
owner: jp
|
|
approval_authority: jp
|
|
vision_refs:
|
|
- ../sot/01-ROADMAP/CORTEX-OS-ROADMAP.md
|
|
- ../sot/02-FRAMEWORK/CORTEX-OS-FRAMEWORK.md
|
|
governing_protocols:
|
|
- ../sot/03-PROTOCOLS/PROFILE-DISTRIBUTION-PROTOCOL.md
|
|
standards:
|
|
- ../sot/04-STANDARDS/FRONTMATTER-SPEC.md
|
|
- ../sot/04-STANDARDS/SOT-ENFORCEMENT.md
|
|
# brand_master_ref omitted — Steev serves JP personally, not a brand/org
|
|
north_star: "keep JP unblocked — surface what needs attention, draft in JP voice, delegate business work to CEO"
|
|
|
|
skills: # exposed to Hermes via skills.external_dirs (→ <repo>/skills)
|
|
- skills/steev-agent # orchestrator — daily briefing, inbox triage, comms drafting,
|
|
# business delegation to ceo-planb
|
|
- skills/proton-tools # Proton Calendar + Email + Contacts (24-tool reference) —
|
|
# uses the 3 cortex MCP servers (proton-calendar/-email/-contacts)
|
|
|
|
# Role tools = scripts at repo root (the "lib"), reached through credbridge.
|
|
# Personal-flow surface only; Plan B marketing CLIs out of scope (cmo-planb owns those).
|
|
lib:
|
|
- credbridge.sh # credctl → env → google-workspace / proton-bridge / perplexity
|
|
- validate_access.sh # PASS / BLOCKED / FAIL per credential per §7
|
|
|
|
# Hermes built-in / external skills Steev reuses but does NOT vendor (per CLAUDE.md
|
|
# "reuse existing core skills"). Informational — these come from Hermes' global skills
|
|
# tree (~/.hermes/skills/) or external skill libraries the principal already installed.
|
|
expected_external_skills:
|
|
- google-workspace # Gmail + Calendar + Contacts
|
|
- apple-notes # macOS-local via osascript
|
|
- apple-reminders # macOS-local via osascript
|
|
- obsidian # ~/vaults/steev PKM
|
|
- himalaya # IMAP/SMTP via proton-bridge sidecar
|
|
- imessage # macOS-local
|
|
- perplexity # WebSearch toolset (lightweight; MCP preferred)
|
|
|
|
# MCP servers Steev consumes. Names match runtime-prefixed form (mcp_<server>_<tool>).
|
|
optional_tools:
|
|
- mcp_proton_calendar # 8-tool Proton Calendar facade
|
|
- mcp_proton_email # 10-tool Proton Email facade
|
|
- mcp_proton_contacts # 6-tool Proton Contacts facade
|
|
- mcp_perplexity # research / WebSearch (key held by MCP server, not credbridge)
|
|
|
|
requires_tools: [terminal, memory_tool]
|
|
|
|
credentials: # validated by validate_access.sh
|
|
- name: google-workspace
|
|
purpose: Gmail + Calendar + Contacts read/write for daily briefing + inbox triage
|
|
resolved_via: credbridge.sh
|
|
- name: proton-bridge-imap
|
|
purpose: local Proton Bridge IMAP/SMTP password (himalaya path)
|
|
resolved_via: credbridge.sh
|
|
- name: perplexity-api
|
|
purpose: Perplexity API key for raw WebSearch (MCP path preferred)
|
|
resolved_via: credbridge.sh
|
|
|
|
db:
|
|
file: steev.db # runtime state; created from schema.sql; never committed
|
|
schema: schema.sql # briefings + inbox_items + invocations + agent_runtime
|
|
|
|
cron:
|
|
- id: steev-daily-briefing
|
|
schedule: "30 6 * * *" # 06:30 local — well before JP's start of day
|
|
skill: steev-agent
|
|
input: { mode: daily-briefing }
|
|
disabled_on_install: true # ships disabled per profile protocol §6 (Safety)
|
|
template: cron/steev-daily-briefing.json.template
|
|
|
|
sovereignty:
|
|
llm_model: qwen-local/qwen3.6-35b-a3b
|
|
host: dgx-spark
|
|
external_api_dependencies:
|
|
- perplexity # WebSearch only; build-time research path. Daily briefing scan uses 1-2 items.
|
|
|
|
# Disclosure block — runtime-truth contract per sot/04-STANDARDS/DISCLOSURE-SCHEMA.md.
|
|
# Wave-4 apply (2026-05-24). Closes Wave-1 audit findings:
|
|
# - HARD-RULE FIX: REMOVE bte MCP (Plan B marketing infra; CLAUDE.md:14 forbids
|
|
# access — steev is JP-personal-scope).
|
|
# - DENY 17 silently-inherited builtin skills (only kanban-worker kept for CEO
|
|
# delegation transport).
|
|
# - Personal-scope discriminator fields (scope/chat_facing/delegates_to) populated.
|
|
# Pre-push hook check 6 enforces this == live `hermes -p steev …` runtime.
|
|
disclosure:
|
|
scope: personal
|
|
schema_version: 1
|
|
chat_facing: true # sole JP chat touchpoint per CLAUDE.md L7-L8
|
|
delegates_to: [ceo-planb] # business work routed to CEO via kanban
|
|
inherit_builtins: false # deny Hermes 84-builtin default; allowlist below
|
|
inherit_mcp_toolsets: false # deny host MCP propagation (closes bte leak)
|
|
sovereign_only: false # perplexity (hosted) intentionally called for WebSearch
|
|
inherit_dirs: []
|
|
|
|
skills:
|
|
- id: steev-agent
|
|
source: local
|
|
path: skills/steev-agent
|
|
role: orchestrator
|
|
- id: proton-tools
|
|
source: local
|
|
path: skills/proton-tools
|
|
role: toolkit
|
|
justification: "24-tool Proton facade (Calendar+Email+Contacts) — JP-personal comms surface"
|
|
- id: google-workspace
|
|
source: builtin
|
|
path: productivity/google-workspace
|
|
role: engine
|
|
justification: "Gmail+Calendar+Contacts for daily briefing + inbox triage (manifest L46)"
|
|
- id: obsidian
|
|
source: builtin
|
|
path: note-taking/obsidian
|
|
role: engine
|
|
justification: "PKM vault at ~/vaults/steev (CLAUDE.md L17)"
|
|
- id: himalaya
|
|
source: builtin
|
|
path: email/himalaya
|
|
role: engine
|
|
justification: "IMAP/SMTP via proton-bridge (manifest L50)"
|
|
- id: kanban-worker
|
|
source: builtin
|
|
path: devops/kanban-worker
|
|
role: engine
|
|
justification: "CEO delegation transport — steev → ceo-planb (steev-agent SKILL.md L83)"
|
|
|
|
mcp_servers: [] # DENY-BY-DEFAULT. bte REMOVED (hard-rule fix).
|
|
# proton-* + perplexity MCP installs PENDING JP review
|
|
# (install-gap row in DISCLOSURE.md §12).
|
|
|
|
sovereign_apis: [] # 0 direct HTTP/gRPC calls (per audit §3)
|
|
|
|
cortex_tools: [] # steev does not consume cortex/L6-* or cortex/PG-*
|
|
|
|
credentials:
|
|
- vault_name: google-workspace
|
|
status: required
|
|
scope: read-write
|
|
used_by: [credbridge.sh]
|
|
governance: "JP-personal; Gmail+Calendar+Contacts for briefing + inbox triage"
|
|
- vault_name: proton-bridge-imap
|
|
status: required
|
|
scope: read-write
|
|
used_by: [credbridge.sh]
|
|
governance: "JP-personal; local Proton Bridge IMAP/SMTP (himalaya path)"
|
|
- vault_name: perplexity-api
|
|
status: optional
|
|
scope: read
|
|
used_by: [credbridge.sh]
|
|
governance: "JP-personal; WebSearch fallback (MCP path preferred)"
|