Docs: rewrap the identity lines; M6.3 names only today's directory
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk
This commit is contained in:
1 parent
cf6058544f
commit
073e0caf1a
2 files changed
+6
-6
No files matched your search
@@ -555,9 +555,9 @@ can do rather than trying to prevent steering.
|
|||||||
- **Only credentials are secrets;** every other setting is reviewable
|
- **Only credentials are secrets;** every other setting is reviewable
|
||||||
configuration.
|
configuration.
|
||||||
|
|
||||||
**Identity:** each agent is its own Samba AD principal in a tightly scoped Authelia
|
**Identity:** each agent is its own Samba AD principal in a tightly scoped
|
||||||
group, never the operator's account, with its own account and token in each
|
Authelia group, never the operator's account, with its own account and token in
|
||||||
service it uses (X5).
|
each service it uses (X5).
|
||||||
|
|
||||||
**Logging:** structured JSON lines to the host journal and the log stack. Every
|
**Logging:** structured JSON lines to the host journal and the log stack. Every
|
||||||
durable state change emits exactly one line, with a fixed envelope (time, agent,
|
durable state change emits exactly one line, with a fixed envelope (time, agent,
|
||||||
|
|||||||
@@ -47,8 +47,8 @@ Only `nisse-dev` has real code; `nisse-core` and `nisse-ops` are placeholders.
|
|||||||
|
|
||||||
## 2. The environment today
|
## 2. The environment today
|
||||||
|
|
||||||
- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, Samba AD with
|
- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, Samba AD
|
||||||
Authelia. The infrastructure repository exists in Gitea.
|
with Authelia. The infrastructure repository exists in Gitea.
|
||||||
- **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark
|
- **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark
|
||||||
(PR #55) chose `qwen3.8-27b` for local work.
|
(PR #55) chose `qwen3.8-27b` for local work.
|
||||||
- **Models by role today:** driver and helper `claude-opus-5-5`, expert
|
- **Models by role today:** driver and helper `claude-opus-5-5`, expert
|
||||||
@@ -572,7 +572,7 @@ SilverBullet so far (M5.4).
|
|||||||
(D7, X2), collection when idle.
|
(D7, X2), collection when idle.
|
||||||
|
|
||||||
**M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host,
|
**M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host,
|
||||||
Samba AD principal (L12; LLDAP until 2026-10-20).
|
Samba AD principal (L12).
|
||||||
|
|
||||||
**M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4).
|
**M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4).
|
||||||
|
|
||||||
|
|||||||
Reference in new issue
Block a user