Foundation for Hermes Enterprise, a multi-tenant control plane for
deploying and operating Hermes agents (runtime = the Harness).
- enterprise/resources.py: v1 resource model (Namespace, Configuration,
Agent, AgentRevision, Harness, Channel, Secret, SecretBroker,
SandboxPolicy, Restriction) with DNS-1123 names, per-kind spec
validation, immutable revision snapshots, and a secret-shape detector
that rejects embedded credential values in configs and audit records.
- enterprise/store.py: SQLite resource store enforcing unique identity,
namespace containment, same-namespace reference resolution (fail-closed),
optimistic concurrency, revision immutability, and dependent-blocking
deletes with namespace drain.
- enterprise/audit.py: append-only attributable audit log that refuses
secret-like payloads.
- enterprise/contracts.py: ComputeDriver / SandboxDriver / SecretDriver /
IAMAdapter / IdentityVerifier ABCs + single-selection DriverRegistry.
Standalone package: nothing in the core agent imports it; no model tools;
no runtime coupling. 31 unit tests.
Teknium