hermes-control-panel/docs/agent-runtime/tiered-specialist-runtime-foundation.md

Tiered Specialist Runtime Foundation

This runtime adds validated contracts, database state, and a safe executable adapter for Hermes specialist-agent delegation.

Runtime Boundary

• Profile manifests are loaded from lib/agent/profile-registry.cjs and synchronized into agent_profiles on startup.
• Delegation requests are validated by lib/agent/contracts.cjs.
• Policy checks in lib/agent/policy-engine.cjs enforce tier, depth, context, capability, timeout, and budget limits.
• agent-controller.cjs exposes an internal bearer-token API at /v1/agent.
• server.cjs mounts authenticated admin API routes at /api/admin/agent.
• HERMES_AGENT_EXECUTION_MODE=disabled is the default and records queued executions with an explicit disabled reason.

APIs

• GET /v1/agent/profiles
• POST /v1/agent/delegations
• GET /v1/agent/delegations?state=queued
• GET /v1/agent/delegations/:id
• POST /v1/agent/delegations/:id/cancel
• POST /v1/agent/executions/:id/grants

The admin control plane exposes the same suffixes under /api/admin/agent after the existing admin session check.

Execution Status

The isolated hermes-agent-worker can now lease and complete bounded tasks. Supported execution modes are:

• disabled: create, validate, audit, and queue records without dispatch.
• fake-live: lease queued tasks into the isolated worker and complete them through the no-side-effect fake provider.

fake-live executes a safe provider adapter with no model or side effects. It builds bounded context packs from approved System Knowledge reads, requires explicit grants for write/automation/provisioning scopes, records budget use and result envelopes, and reaches terminal states. Full real-provider execution remains a later adapter.