77655c298c
Phase 8 Production Hardening with complete governance infrastructure: - Vault integration with tiered policies (T0-T4) - DragonflyDB state management - SQLite audit ledger - Pipeline DSL and templates - Promotion/revocation engine - Checkpoint system for session persistence - Health manager and circuit breaker for fault tolerance - GitHub/Slack integrations - Architectural test pipeline with bug watcher, suggestion engine, council review - Multi-agent chaos testing framework Test Results: - Governance tests: 68/68 passing - E2E workflow: 16/16 passing - Phase 2 Vault: 14/14 passing - Integration tests: 27/27 passing Coverage: 57.6% average across 12 phases Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
82 lines
1.8 KiB
JSON
82 lines
1.8 KiB
JSON
{
|
|
"agent_id": "tier0-agent-001",
|
|
"agent_version": "1.0.0",
|
|
"tier": 0,
|
|
"tier_name": "Observer",
|
|
|
|
"description": "Tier 0 Observer Agent - Read-only access, plan generation only",
|
|
|
|
"capabilities": {
|
|
"read_inventory": true,
|
|
"read_documentation": true,
|
|
"generate_plans": true,
|
|
"execute_commands": false,
|
|
"modify_files": false,
|
|
"access_secrets": false,
|
|
"ssh_access": false,
|
|
"api_access": false
|
|
},
|
|
|
|
"constraints": {
|
|
"allowed_actions": [
|
|
"read_file",
|
|
"list_directory",
|
|
"search_code",
|
|
"generate_plan",
|
|
"request_review"
|
|
],
|
|
"forbidden_actions": [
|
|
"execute_command",
|
|
"write_file",
|
|
"delete_file",
|
|
"ssh_connect",
|
|
"api_call",
|
|
"terraform_apply",
|
|
"ansible_run"
|
|
],
|
|
"allowed_paths": [
|
|
"/opt/agent-governance/docs/",
|
|
"/opt/agent-governance/inventory/",
|
|
"/opt/agent-governance/agents/tier0-agent/workspace/",
|
|
"/opt/agent-governance/agents/tier0-agent/plans/"
|
|
],
|
|
"forbidden_paths": [
|
|
"/opt/vault/",
|
|
"/etc/",
|
|
"/root/",
|
|
"**/.env",
|
|
"**/credentials*",
|
|
"**/secrets*"
|
|
]
|
|
},
|
|
|
|
"vault": {
|
|
"auth_method": "approle",
|
|
"role_name": "tier0-agent",
|
|
"token_ttl": "1h",
|
|
"token_max_ttl": "4h",
|
|
"policies": ["t0-observer", "agent-self-read"]
|
|
},
|
|
|
|
"governance": {
|
|
"preflight_required": true,
|
|
"plan_approval_required": true,
|
|
"evidence_required": true,
|
|
"heartbeat_interval": 30,
|
|
"error_budget": {
|
|
"max_total_errors": 5,
|
|
"max_same_error_repeats": 2
|
|
}
|
|
},
|
|
|
|
"promotion": {
|
|
"target_tier": 1,
|
|
"requirements": {
|
|
"min_compliant_runs": 5,
|
|
"min_consecutive_compliant": 3,
|
|
"required_actions": ["generate_plan"],
|
|
"max_violations_30d": 0
|
|
}
|
|
}
|
|
}
|