3 Commits

Include renames

Author	SHA1	Message	Date
kyle	e36da19f57	p2.4: restricted workspace for permitted callers ... guardian-star context is allowed only when the authenticated caller is in permit_restricted and mapped to that workspace. Fleet callers remapped to it still refuse. CLI client.toml: SIFT_CLIENT, then $HERMES_HOME/sift, then ~/.config.	2026-09-23 08:33:58 -07:00
kyle	ff87a04f94	p2: fence document tags, atomic fleetctx, harden workspace ... Neutralise </document and <document in page text. Counters are atomic.Uint64. Workspace names are [A-Za-z0-9_-] and PathEscaped; foreign workspace_id rows are dropped. Wayback closest.url must be https://web.archive.org. archive.today snapshot_at is Memento-Datetime or null.	2026-09-23 00:01:04 -07:00
kyle	2f9d3d97e6	p2: digest with in-sift FIFO, SQLite caches, Honcho context, recover ... Dixie is capped (max_inflight 2, queue_depth 8, queue_wait 20s) and never queued on llama-server. Streaming chat, thinking off, 45s fallback to clean. Digest and chunk-embedding caches are content-addressed SQLite (Honcho context is not cached). Recover uses the guarded Fetcher. guardian-star is refused in code.	2026-09-22 23:54:49 -07:00