Proven on tank: claude backend (01a0cfc1, MET, pushed) and kimi backend
(01a0cfd5: 0 direct connections to api.kimi.com, down from 4; work delivered;
judge unavailable only because GLM is out of quota and Kimi cannot judge Kimi).
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
LLM proxy enabled on prod and proven on mission 01a0cf7e: container env and
config hold only cmlp tokens (no real key value anywhere in either), both
fallback hops rewritten, the mission completed, judged MET and pushed. Controls:
no token 401, forged 401, finished mission 403, port unreachable from outside.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Proven live with a canary (missions 01a0cf3d, 01a0cf4c): push refused, patch
redacted, 0 of 19 events and 0 judge fields carrying the value.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
- the judge is cross-provider only when one is configured; the self-host
default judges with Claude and records it as not independent
- the stop gate blocks at most 3 times, not until the check passes
- mission containers DO carry model-provider keys in their environment
(verified on prod: CLAUDE_CODE_OAUTH_TOKEN, ZAI_API_KEY, KIMI_API_KEY);
the broker claim holds for platform credentials, not these
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Last rewritten 2026-07-21. Verified against the repo and prod before writing:
- adds what shipped since: the single dashboard, recipes + team templates,
container and microVM tiers, the independent judge (Kimi fallback, quota
watchdog, offline npm), tool gates + shadow task-permission/taint, skills
door, project memory + self_audit, continuous research/podcast, cm-decide,
fleet placement, A2A
- fixes wrong facts: cm-brain is the .brain facade (not LLM planning);
cm-decide and fcagent were missing; migrations are 0001–0087 in migrations/;
the deploy path is CI (test → build → push) plus the gw-04 timer
- the line-count budget is NOT enforced in CI (12 files exceed 1500) — said so
- safety section no longer claims every agent is tool-free and network-less:
container-tier missions have public egress, and the gate is a guardrail,
not a boundary
Every relative link and repo path in the file was checked to exist.
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
The README was last touched 2026-06-18 and had drifted badly:
- Crate table missed cm-brain, cm-testkit, cm-tools, and the
clawmates-node bin (the herdr daemon)
- Missions system (slices 1-9) was not mentioned
- Herdr phases 0-3 (persistent daemon, dispatch, live pane, INFRA-tier
sessions) were not mentioned
- Prod deploy path on gw-04 was undocumented — the three real gotchas
(non-compose-managed runtime, UID 65532 bind-mount, ZeroClaw provider
env inheritance) are what bit us on 2026-07-09 and 2026-07-12
- CI 1500-LoC hard budget was not called out
- Refine still said "Gemini" — refine switched to Opus 4.8 in 1cbbbbd
- Broker master-key backup mentioned only via cross-link
Splits crates into workspace crates + bins tables, adds a Production
deployment section for gw-04, adds a CI budgets section, promotes the
broker key warning inline, and rewrites Shipped to reflect what actually
landed since 2026-06-18.
