kyle
e36da19f57
p2.4: restricted workspace for permitted callers
...
guardian-star context is allowed only when the authenticated caller is in
permit_restricted and mapped to that workspace. Fleet callers remapped to it
still refuse. CLI client.toml: SIFT_CLIENT, then $HERMES_HOME/sift, then ~/.config.
2026-09-23 08:33:58 -07:00
kyle and Claude Opus 5.5
3b41d6ffbc
plan: UA decided — default sift/<ver>, config override, measure bot-blocks
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:28:04 -07:00
kyle and Claude Opus 5.5
7d4f090a12
skill: sift as the explicit first step for fetch/search; plan §4.3 CLI client, --recover, UA policy
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:25:57 -07:00
kyle and Claude Opus 5.5
1e915ce715
plan: Makefile for non-Nix hosts (source of truth for build flags)
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:15:29 -07:00
kyle and Claude Opus 5.5
e9aea1829e
plan: Go instead of Python (Kyle's preference); dialer-Control SSRF check, gojq
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:05:59 -07:00
kyle and Claude Opus 5.5
94876864e5
sift: implementation plan
...
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-09-22 21:00:00 -07:00
kyle
