Initial commit: Agent Governance System Phase 8

Phase 8 Production Hardening with complete governance infrastructure: - Vault integration with tiered policies (T0-T4) - DragonflyDB state management - SQLite audit ledger - Pipeline DSL and templates - Promotion/revocation engine - Checkpoint system for session persistence - Health manager and circuit breaker for fault tolerance - GitHub/Slack integrations - Architectural test pipeline with bug watcher, suggestion engine, council review - Multi-agent chaos testing framework Test Results: - Governance tests: 68/68 passing - E2E workflow: 16/16 passing - Phase 2 Vault: 14/14 passing - Integration tests: 27/27 passing Coverage: 57.6% average across 12 phases Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-23 22:07:06 -05:00
commit 77655c298c
338 changed files with 63491 additions and 0 deletions
@@ -0,0 +1,32 @@
+# Config
+
+> Observer-tier agent (read-only) - config submodule
+
+## Overview
+
+This directory contains observer-tier agent (read-only) - config submodule.
+
+## Key Files
+
+| File | Description |
+|------|-------------|
+| `agent.json` | Data/Schema |
+
+## Interfaces / APIs
+
+*Document any APIs, CLI commands, or interfaces here.*
+
+## Status
+
+** Not Started**
+
+See [STATUS.md](./STATUS.md) for detailed progress tracking.
+
+## Architecture Reference
+
+Part of the [Agent Governance System](/opt/agent-governance/docs/ARCHITECTURE.md).
+
+Parent: [Tier0 Agent](..)
+
+---
+*Last updated: 2026-01-23 23:25:09 UTC*
@@ -0,0 +1,30 @@
+# Status: Config
+
+## Current Phase
+
+** NOT STARTED**
+
+## Tasks
+
+| Status | Task | Updated |
+|--------|------|---------|
+| ☐ | *No tasks defined* | - |
+
+## Dependencies
+
+*No external dependencies.*
+
+## Issues / Blockers
+
+*No current issues or blockers.*
+
+## Activity Log
+
+### 2026-01-23 23:25:09 UTC
+- **Phase**: NOT STARTED
+- **Action**: Initialized
+- **Details**: Status tracking initialized for this directory.
+
+
+---
+*Last updated: 2026-01-23 23:25:09 UTC*
@@ -0,0 +1,81 @@
+{
+  "agent_id": "tier0-agent-001",
+  "agent_version": "1.0.0",
+  "tier": 0,
+  "tier_name": "Observer",
+
+  "description": "Tier 0 Observer Agent - Read-only access, plan generation only",
+
+  "capabilities": {
+    "read_inventory": true,
+    "read_documentation": true,
+    "generate_plans": true,
+    "execute_commands": false,
+    "modify_files": false,
+    "access_secrets": false,
+    "ssh_access": false,
+    "api_access": false
+  },
+
+  "constraints": {
+    "allowed_actions": [
+      "read_file",
+      "list_directory",
+      "search_code",
+      "generate_plan",
+      "request_review"
+    ],
+    "forbidden_actions": [
+      "execute_command",
+      "write_file",
+      "delete_file",
+      "ssh_connect",
+      "api_call",
+      "terraform_apply",
+      "ansible_run"
+    ],
+    "allowed_paths": [
+      "/opt/agent-governance/docs/",
+      "/opt/agent-governance/inventory/",
+      "/opt/agent-governance/agents/tier0-agent/workspace/",
+      "/opt/agent-governance/agents/tier0-agent/plans/"
+    ],
+    "forbidden_paths": [
+      "/opt/vault/",
+      "/etc/",
+      "/root/",
+      "**/.env",
+      "**/credentials*",
+      "**/secrets*"
+    ]
+  },
+
+  "vault": {
+    "auth_method": "approle",
+    "role_name": "tier0-agent",
+    "token_ttl": "1h",
+    "token_max_ttl": "4h",
+    "policies": ["t0-observer", "agent-self-read"]
+  },
+
+  "governance": {
+    "preflight_required": true,
+    "plan_approval_required": true,
+    "evidence_required": true,
+    "heartbeat_interval": 30,
+    "error_budget": {
+      "max_total_errors": 5,
+      "max_same_error_repeats": 2
+    }
+  },
+
+  "promotion": {
+    "target_tier": 1,
+    "requirements": {
+      "min_compliant_runs": 5,
+      "min_consecutive_compliant": 3,
+      "required_actions": ["generate_plan"],
+      "max_violations_30d": 0
+    }
+  }
+}