diff --git a/.sinapsi/handoff.md b/.sinapsi/handoff.md index 21fc843..266fb69 100644 --- a/.sinapsi/handoff.md +++ b/.sinapsi/handoff.md @@ -1,31 +1,31 @@ # Handoff -_Aggiornato: 2026-07-22 — migrazione personale chiusa e copia organizzativa rimossa._ +_Aggiornato: 2026-07-22 — identità pubblica inglese applicata._ ## Stato -Repository canonico: `https://github.com/PatrickDev-it/sistemista`; default `development`, con -`validation` e `production` protetti. `origin` punta esclusivamente al profilo personale. -`Ignoryx/sistemista` è stata eliminata e verificata inesistente. La storia pre-pubblicazione resta -solo nel branch locale `archive/pre-publication`, intenzionalmente mai pubblicato. +Repository canonico: `https://github.com/PatrickDev-it/sysops-agent`; default `development`, con +`validation` e `production` protetti. Branch corrente: `docs/sysops-agent-brand`. `origin` punta +esclusivamente al nuovo URL personale. Il repository resta pinnato dopo la rinomina. -## Migrazione verificata +La storia pre-pubblicazione resta solo nel branch locale `archive/pre-publication`, mai pubblicato. +La precedente copia `Ignoryx/sistemista` rimane eliminata e verificata inesistente. -- I tre branch pubblici sono stati replicati inizialmente con SHA identici. -- PR personale #7 integrata in `development` al commit `04a36b7`. -- Sei required check verdi: Lint, Ubuntu, Windows, Package, Dependency audit e Gitleaks. -- Ruleset personale `19557677` attivo su `development`, `validation` e `production`. -- Discussions, topics, secret scanning, push protection, Dependabot e private reporting attivi. -- README, package metadata e NOTICE riferiscono il repository personale. -- La copia organizzativa e il relativo remote locale sono stati rimossi. +## Rebrand verificato + +- Nome pubblico: **SysOps Agent**. +- Package Python e comando primario: `sysops-agent` / `sysops_agent` negli artifact. +- Alias CLI `sistemista` mantenuto temporaneamente durante il ciclo alpha. +- README, URL package, CONTRIBUTING, SECURITY e NOTICE allineati. +- Branch, storia, ruleset e pin preservati dalla rinomina GitHub. ## Gate corrente - Suite locale: **713 passed, 3 skipped**. -- Ruff, format check e Mypy verdi. -- Wheel/sdist, pip-audit e Gitleaks verdi. -- CI multi-OS personale confermata su Ubuntu e Windows. -- Pin del profilo ancora manuale: GitHub non espone una API pubblica per questa operazione. +- Ruff: clean; format: **149 file** conformi; Mypy: zero errori. +- Wheel/sdist `sysops_agent-0.1.0a1` costruiti in isolamento. +- CI multi-OS, package, audit e Gitleaks restano required check del ruleset. +- Ruleset personale `19557677` attivo su `development`, `validation` e `production`. ## RFC chiuse @@ -35,7 +35,7 @@ solo nel branch locale `archive/pre-publication`, intenzionalmente mai pubblicat ## Release path -1. Pin manuale di `PatrickDev-it/sistemista` tramite **Customize your pins**. +1. Integrare il rebrand tramite PR verde su `development`. 2. RFC-007: dependency reproducibility, SBOM e provenance. 3. RFC-008: backend isolato kernel/VM ed escape suite; blocker production. 4. RFC-009: benchmark multi-OS, risorse e claim falsificabili. @@ -54,11 +54,11 @@ chiusura di tutti i publication target e al GO formale. ## Comandi canonici ```powershell -python -m ruff check . -python -m ruff format --check . -python -m mypy -python -m pytest -q -python -m build -python -m pip_audit -r requirements.txt +.\.venv\Scripts\python -m ruff check . +.\.venv\Scripts\python -m ruff format --check . +.\.venv\Scripts\python -m mypy +.\.venv\Scripts\python -m pytest -q +.\.venv\Scripts\python -m build +.\.venv\Scripts\python -m pip_audit -r requirements.txt gitleaks git . --log-opts="HEAD" --no-banner --redact ``` diff --git a/.sinapsi/session.md b/.sinapsi/session.md index 0ae0683..b20a784 100644 --- a/.sinapsi/session.md +++ b/.sinapsi/session.md @@ -1132,3 +1132,12 @@ default e security features verificati. `Ignoryx/sistemista` eliminata tramite i e verificata inesistente; rimosso anche il remote locale organizzativo. Unico residuo operativo: selezionare `PatrickDev-it/sistemista` nel dialogo web **Customize your pins**, non automatizzabile tramite API GitHub pubblica. + +### English product identity + +Repository personale rinominato da `sistemista` a `sysops-agent`, preservando branch, storia, +ruleset e pin. Identità pubblica aggiornata a **SysOps Agent** in README, metadata Python, +contribution/security policy e NOTICE; package e comando primario diventano `sysops-agent`. +L'alias CLI `sistemista` resta temporaneamente per compatibilità durante l'alpha. `origin` punta +al nuovo URL canonico. Gate locale: Ruff e format verdi, Mypy zero, **713 passed, 3 skipped**, +wheel/sdist `sysops_agent-0.1.0a1` costruiti in isolamento. diff --git a/.sinapsi/summary.md b/.sinapsi/summary.md index ca1c65c..320ef4a 100644 --- a/.sinapsi/summary.md +++ b/.sinapsi/summary.md @@ -52,6 +52,7 @@ patch: the project's shape (above), the last sessions at a glance, and a short r agent at the end of every patch, at the same time it appends session.md. Drop the 11th; the full history is in session.md and, once archived, in archive/. --> +- 2026-07-22 — Rinominato in SysOps Agent: repo, package, CLI primaria e superfici OSS allineate. - 2026-07-22 — Chiusa migrazione personale: PR #7 con sei check verdi; copia Ignoryx eliminata. - 2026-07-22 — Migrata storia pubblica al profilo personale; fixate 9 failure CI Ubuntu non ermetiche. - 2026-07-22 — Chiusa RFC-006: Mypy 30→0, 713 test verdi e runtime netto -26 LOC. @@ -66,11 +67,11 @@ patch: the project's shape (above), the last sessions at a glance, and a short r fragile, what the next action is. Rewritten (not appended) from session.md + handoff.md at the end of every patch. If it grows past 10 lines it has stopped being a summary. --> -- Repository canonico: `PatrickDev-it/sistemista`; copia `Ignoryx/sistemista` eliminata e remote rimosso. -- PR personale #7 integrata con tutti i sei required check verdi su Ubuntu e Windows. +- Repository canonico: `PatrickDev-it/sysops-agent`; storia, tre branch, ruleset e pin preservati. +- Nome pubblico, package, CLI primaria e documentazione OSS allineati a **SysOps Agent**. +- Alias CLI `sistemista` mantenuto temporaneamente per compatibilità alpha. - RFC-005 integrata; RFC-006 chiusa con Mypy 30→0 senza suppress globali. - Gate locale: 713 passed/3 skipped; Ruff/format/type, build, audit e Gitleaks verdi. -- Wheel/sdist `0.1.0a1` verdi con 8 prompt, 8 KB YAML, LICENSE e NOTICE. +- Wheel/sdist `sysops_agent-0.1.0a1` verdi con 8 prompt, 8 KB YAML, LICENSE e NOTICE. - Ruleset `19557677` e security features personali attivi. -- Pin del profilo ancora manuale: GitHub non offre una API pubblica per configurarlo. -- Prossimo: pin via UI, quindi RFC-007 SBOM/provenance; nessuna promozione anticipata. +- Prossimo: PR verde del rebrand, quindi RFC-007 SBOM/provenance; nessuna promozione anticipata. diff --git a/.sinapsi/verification.md b/.sinapsi/verification.md index 6c09faa..aa273e7 100644 --- a/.sinapsi/verification.md +++ b/.sinapsi/verification.md @@ -20,8 +20,14 @@ gate. ## Latest verification +- 2026-07-22 — English public identity: repository renamed to `PatrickDev-it/sysops-agent`; + README, package metadata, primary CLI, contribution/security policy and NOTICE aligned. + Compatibility alias `sistemista` retained for the alpha cycle. Local gate: Ruff clean, + **149 files** formatted, Mypy zero, **713 passed, 3 skipped**, isolated wheel/sdist + `sysops_agent-0.1.0a1` built successfully. - 2026-07-22 — Personal-profile migration: `development`, `validation` e `production` hanno - SHA identici tra origine organizzativa e `PatrickDev-it/sistemista`; default/ruleset/security + SHA identici tra origine organizzativa e il repository personale, ora `PatrickDev-it/sysops-agent`; + default/ruleset/security features ricreati. Security remoto verde; il primo CI Ubuntu ha esposto 9 test non ermetici. Fix locale: path fixture native, state DB esterno al task workspace, alias basename indipendente dall'OS. Gate locale: **713 passed, 3 skipped**, Ruff/format/Mypy/build/audit/Gitleaks verdi. diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index aaeaaa6..b438edb 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -1,6 +1,6 @@ # Contributing -Sistemista accepts focused, evidence-backed contributions. The project is security-sensitive: +SysOps Agent accepts focused, evidence-backed contributions. The project is security-sensitive: behavioral claims must be reproducible, and safety controls must fail closed. ## Before opening a change diff --git a/NOTICE b/NOTICE index e9c9913..d755423 100644 --- a/NOTICE +++ b/NOTICE @@ -1,5 +1,5 @@ -Sistemista -Copyright 2026 Sistemista contributors +SysOps Agent +Copyright 2026 SysOps Agent contributors This product is licensed under the Apache License, Version 2.0. diff --git a/README.md b/README.md index d4a79d1..6d6df36 100644 --- a/README.md +++ b/README.md @@ -1,19 +1,19 @@ -# Sistemista +# SysOps Agent Local-first, model-assisted system operations with deterministic execution controls, verification predicates, recovery loops, and a redacted audit trail. -> **Status: public alpha (`0.1.0a1`).** Sistemista executes commands on the host. It is not +> **Status: public alpha (`0.1.0a1`).** SysOps Agent executes commands on the host. It is not > production-ready, does not provide a security sandbox, and must not be run unattended or > against untrusted objectives. Use an isolated disposable machine or VM. -[![CI](https://github.com/PatrickDev-it/sistemista/actions/workflows/ci.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sistemista/actions/workflows/ci.yml) -[![Security](https://github.com/PatrickDev-it/sistemista/actions/workflows/security.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sistemista/actions/workflows/security.yml) +[![CI](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/ci.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/ci.yml) +[![Security](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/security.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/security.yml) [![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE) ## What it is -Sistemista is an experimental Python control plane around two locally hosted GGUF models: +SysOps Agent is an experimental Python control plane around two locally hosted GGUF models: | Role | Default artifact | Responsibility | |---|---|---| @@ -51,14 +51,14 @@ Prerequisites: [`workspace/models/README.md`](workspace/models/README.md) ```powershell -git clone https://github.com/PatrickDev-it/sistemista.git -cd sistemista +git clone https://github.com/PatrickDev-it/sysops-agent.git +cd sysops-agent py -3.12 -m venv .venv .\.venv\Scripts\python -m pip install --upgrade pip .\.venv\Scripts\python -m pip install -e . $env:SISTEMISTA_LLAMA_SERVER_BIN = "C:\path\to\llama-server.exe" $env:SISTEMISTA_ORACLE = "0" -.\.venv\Scripts\sistemista "inspect disk pressure" --workspace C:\safe\disposable-workspace +.\.venv\Scripts\sysops-agent "inspect disk pressure" --workspace C:\safe\disposable-workspace ``` On Unix-like hosts, activate `.venv/bin/activate` and use POSIX paths. This path is available @@ -136,7 +136,7 @@ until the validation evidence and release supply chain meet the promotion gate. ## Security and privacy -Read [SECURITY.md](SECURITY.md) before deployment or vulnerability reporting. Sistemista is +Read [SECURITY.md](SECURITY.md) before deployment or vulnerability reporting. SysOps Agent is local-first, but an enabled remote oracle receives redacted operational context. Redaction is a defense-in-depth control, not a guarantee that arbitrary sensitive content cannot leave the host. Confinement is an application policy, not kernel isolation. diff --git a/SECURITY.md b/SECURITY.md index 5b51b1d..0c6924a 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,7 +2,7 @@ ## Supported versions -Sistemista is an alpha research preview. No released version is currently supported for +SysOps Agent is an alpha research preview. No released version is currently supported for production use. Security fixes are applied to `development` first and promoted only after the repository's validation gates pass. @@ -17,7 +17,7 @@ or coordinated disclosure depend on severity and reproducibility; this is not an ## Threat boundary -Sistemista executes generated commands on the operator's host. The current alpha does not claim: +SysOps Agent executes generated commands on the operator's host. The current alpha does not claim: - process, filesystem, network, or privilege isolation; - safe unattended operation; diff --git a/pyproject.toml b/pyproject.toml index 099af2a..c704e97 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -3,13 +3,13 @@ requires = ["setuptools>=77"] build-backend = "setuptools.build_meta" [project] -name = "sistemista" +name = "sysops-agent" version = "0.1.0a1" description = "Local-first, model-assisted system operations with bounded execution and audit trails" readme = "README.md" license = "Apache-2.0" license-files = ["LICENSE", "NOTICE"] -authors = [{ name = "Sistemista contributors" }] +authors = [{ name = "SysOps Agent contributors" }] requires-python = ">=3.12" keywords = ["ai-agent", "llama-cpp", "local-first", "privacy", "sysops"] classifiers = [ @@ -65,12 +65,14 @@ warn_redundant_casts = true no_error_summary = true [project.urls] -Homepage = "https://github.com/PatrickDev-it/sistemista" -Documentation = "https://github.com/PatrickDev-it/sistemista#readme" -Issues = "https://github.com/PatrickDev-it/sistemista/issues" -Source = "https://github.com/PatrickDev-it/sistemista" +Homepage = "https://github.com/PatrickDev-it/sysops-agent" +Documentation = "https://github.com/PatrickDev-it/sysops-agent#readme" +Issues = "https://github.com/PatrickDev-it/sysops-agent/issues" +Source = "https://github.com/PatrickDev-it/sysops-agent" [project.scripts] +sysops-agent = "src.main:cli_entry" +# Compatibility alias retained during the public-alpha cycle. sistemista = "src.main:cli_entry" # ── Test configuration — the suite's own invariants ──────────────────────────