Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
48 changes: 24 additions & 24 deletions .sinapsi/handoff.md
Original file line number Diff line number Diff line change
@@ -1,31 +1,31 @@
# Handoff

_Aggiornato: 2026-07-22 — migrazione personale chiusa e copia organizzativa rimossa._
_Aggiornato: 2026-07-22 — identità pubblica inglese applicata._

## Stato

Repository canonico: `https://github.com/PatrickDev-it/sistemista`; default `development`, con
`validation` e `production` protetti. `origin` punta esclusivamente al profilo personale.
`Ignoryx/sistemista` è stata eliminata e verificata inesistente. La storia pre-pubblicazione resta
solo nel branch locale `archive/pre-publication`, intenzionalmente mai pubblicato.
Repository canonico: `https://github.com/PatrickDev-it/sysops-agent`; default `development`, con
`validation` e `production` protetti. Branch corrente: `docs/sysops-agent-brand`. `origin` punta
esclusivamente al nuovo URL personale. Il repository resta pinnato dopo la rinomina.

## Migrazione verificata
La storia pre-pubblicazione resta solo nel branch locale `archive/pre-publication`, mai pubblicato.
La precedente copia `Ignoryx/sistemista` rimane eliminata e verificata inesistente.

- I tre branch pubblici sono stati replicati inizialmente con SHA identici.
- PR personale #7 integrata in `development` al commit `04a36b7`.
- Sei required check verdi: Lint, Ubuntu, Windows, Package, Dependency audit e Gitleaks.
- Ruleset personale `19557677` attivo su `development`, `validation` e `production`.
- Discussions, topics, secret scanning, push protection, Dependabot e private reporting attivi.
- README, package metadata e NOTICE riferiscono il repository personale.
- La copia organizzativa e il relativo remote locale sono stati rimossi.
## Rebrand verificato

- Nome pubblico: **SysOps Agent**.
- Package Python e comando primario: `sysops-agent` / `sysops_agent` negli artifact.
- Alias CLI `sistemista` mantenuto temporaneamente durante il ciclo alpha.
- README, URL package, CONTRIBUTING, SECURITY e NOTICE allineati.
- Branch, storia, ruleset e pin preservati dalla rinomina GitHub.

## Gate corrente

- Suite locale: **713 passed, 3 skipped**.
- Ruff, format check e Mypy verdi.
- Wheel/sdist, pip-audit e Gitleaks verdi.
- CI multi-OS personale confermata su Ubuntu e Windows.
- Pin del profilo ancora manuale: GitHub non espone una API pubblica per questa operazione.
- Ruff: clean; format: **149 file** conformi; Mypy: zero errori.
- Wheel/sdist `sysops_agent-0.1.0a1` costruiti in isolamento.
- CI multi-OS, package, audit e Gitleaks restano required check del ruleset.
- Ruleset personale `19557677` attivo su `development`, `validation` e `production`.

## RFC chiuse

Expand All @@ -35,7 +35,7 @@ solo nel branch locale `archive/pre-publication`, intenzionalmente mai pubblicat

## Release path

1. Pin manuale di `PatrickDev-it/sistemista` tramite **Customize your pins**.
1. Integrare il rebrand tramite PR verde su `development`.
2. RFC-007: dependency reproducibility, SBOM e provenance.
3. RFC-008: backend isolato kernel/VM ed escape suite; blocker production.
4. RFC-009: benchmark multi-OS, risorse e claim falsificabili.
Expand All @@ -54,11 +54,11 @@ chiusura di tutti i publication target e al GO formale.
## Comandi canonici

```powershell
python -m ruff check .
python -m ruff format --check .
python -m mypy
python -m pytest -q
python -m build
python -m pip_audit -r requirements.txt
.\.venv\Scripts\python -m ruff check .
.\.venv\Scripts\python -m ruff format --check .
.\.venv\Scripts\python -m mypy
.\.venv\Scripts\python -m pytest -q
.\.venv\Scripts\python -m build
.\.venv\Scripts\python -m pip_audit -r requirements.txt
gitleaks git . --log-opts="HEAD" --no-banner --redact
```
9 changes: 9 additions & 0 deletions .sinapsi/session.md
Original file line number Diff line number Diff line change
Expand Up @@ -1132,3 +1132,12 @@ default e security features verificati. `Ignoryx/sistemista` eliminata tramite i
e verificata inesistente; rimosso anche il remote locale organizzativo. Unico residuo operativo:
selezionare `PatrickDev-it/sistemista` nel dialogo web **Customize your pins**, non automatizzabile
tramite API GitHub pubblica.

### English product identity

Repository personale rinominato da `sistemista` a `sysops-agent`, preservando branch, storia,
ruleset e pin. Identità pubblica aggiornata a **SysOps Agent** in README, metadata Python,
contribution/security policy e NOTICE; package e comando primario diventano `sysops-agent`.
L'alias CLI `sistemista` resta temporaneamente per compatibilità durante l'alpha. `origin` punta
al nuovo URL canonico. Gate locale: Ruff e format verdi, Mypy zero, **713 passed, 3 skipped**,
wheel/sdist `sysops_agent-0.1.0a1` costruiti in isolamento.
11 changes: 6 additions & 5 deletions .sinapsi/summary.md
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,7 @@ patch: the project's shape (above), the last sessions at a glance, and a short r
agent at the end of every patch, at the same time it appends session.md. Drop the
11th; the full history is in session.md and, once archived, in archive/. -->

- 2026-07-22 — Rinominato in SysOps Agent: repo, package, CLI primaria e superfici OSS allineate.
- 2026-07-22 — Chiusa migrazione personale: PR #7 con sei check verdi; copia Ignoryx eliminata.
- 2026-07-22 — Migrata storia pubblica al profilo personale; fixate 9 failure CI Ubuntu non ermetiche.
- 2026-07-22 — Chiusa RFC-006: Mypy 30→0, 713 test verdi e runtime netto -26 LOC.
Expand All @@ -66,11 +67,11 @@ patch: the project's shape (above), the last sessions at a glance, and a short r
fragile, what the next action is. Rewritten (not appended) from session.md + handoff.md
at the end of every patch. If it grows past 10 lines it has stopped being a summary. -->

- Repository canonico: `PatrickDev-it/sistemista`; copia `Ignoryx/sistemista` eliminata e remote rimosso.
- PR personale #7 integrata con tutti i sei required check verdi su Ubuntu e Windows.
- Repository canonico: `PatrickDev-it/sysops-agent`; storia, tre branch, ruleset e pin preservati.
- Nome pubblico, package, CLI primaria e documentazione OSS allineati a **SysOps Agent**.
- Alias CLI `sistemista` mantenuto temporaneamente per compatibilità alpha.
- RFC-005 integrata; RFC-006 chiusa con Mypy 30→0 senza suppress globali.
- Gate locale: 713 passed/3 skipped; Ruff/format/type, build, audit e Gitleaks verdi.
- Wheel/sdist `0.1.0a1` verdi con 8 prompt, 8 KB YAML, LICENSE e NOTICE.
- Wheel/sdist `sysops_agent-0.1.0a1` verdi con 8 prompt, 8 KB YAML, LICENSE e NOTICE.
- Ruleset `19557677` e security features personali attivi.
- Pin del profilo ancora manuale: GitHub non offre una API pubblica per configurarlo.
- Prossimo: pin via UI, quindi RFC-007 SBOM/provenance; nessuna promozione anticipata.
- Prossimo: PR verde del rebrand, quindi RFC-007 SBOM/provenance; nessuna promozione anticipata.
8 changes: 7 additions & 1 deletion .sinapsi/verification.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,8 +20,14 @@ gate.

## Latest verification

- 2026-07-22 — English public identity: repository renamed to `PatrickDev-it/sysops-agent`;
README, package metadata, primary CLI, contribution/security policy and NOTICE aligned.
Compatibility alias `sistemista` retained for the alpha cycle. Local gate: Ruff clean,
**149 files** formatted, Mypy zero, **713 passed, 3 skipped**, isolated wheel/sdist
`sysops_agent-0.1.0a1` built successfully.
- 2026-07-22 — Personal-profile migration: `development`, `validation` e `production` hanno
SHA identici tra origine organizzativa e `PatrickDev-it/sistemista`; default/ruleset/security
SHA identici tra origine organizzativa e il repository personale, ora `PatrickDev-it/sysops-agent`;
default/ruleset/security
features ricreati. Security remoto verde; il primo CI Ubuntu ha esposto 9 test non ermetici.
Fix locale: path fixture native, state DB esterno al task workspace, alias basename indipendente
dall'OS. Gate locale: **713 passed, 3 skipped**, Ruff/format/Mypy/build/audit/Gitleaks verdi.
Expand Down
2 changes: 1 addition & 1 deletion CONTRIBUTING.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Contributing

Sistemista accepts focused, evidence-backed contributions. The project is security-sensitive:
SysOps Agent accepts focused, evidence-backed contributions. The project is security-sensitive:
behavioral claims must be reproducible, and safety controls must fail closed.

## Before opening a change
Expand Down
4 changes: 2 additions & 2 deletions NOTICE
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
Sistemista
Copyright 2026 Sistemista contributors
SysOps Agent
Copyright 2026 SysOps Agent contributors

This product is licensed under the Apache License, Version 2.0.

Expand Down
18 changes: 9 additions & 9 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,19 +1,19 @@
# Sistemista
# SysOps Agent

Local-first, model-assisted system operations with deterministic execution controls,
verification predicates, recovery loops, and a redacted audit trail.

> **Status: public alpha (`0.1.0a1`).** Sistemista executes commands on the host. It is not
> **Status: public alpha (`0.1.0a1`).** SysOps Agent executes commands on the host. It is not
> production-ready, does not provide a security sandbox, and must not be run unattended or
> against untrusted objectives. Use an isolated disposable machine or VM.

[![CI](https://github.com/PatrickDev-it/sistemista/actions/workflows/ci.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sistemista/actions/workflows/ci.yml)
[![Security](https://github.com/PatrickDev-it/sistemista/actions/workflows/security.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sistemista/actions/workflows/security.yml)
[![CI](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/ci.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/ci.yml)
[![Security](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/security.yml/badge.svg?branch=development)](https://github.com/PatrickDev-it/sysops-agent/actions/workflows/security.yml)
[![License](https://img.shields.io/badge/license-Apache--2.0-blue.svg)](LICENSE)

## What it is

Sistemista is an experimental Python control plane around two locally hosted GGUF models:
SysOps Agent is an experimental Python control plane around two locally hosted GGUF models:

| Role | Default artifact | Responsibility |
|---|---|---|
Expand Down Expand Up @@ -51,14 +51,14 @@ Prerequisites:
[`workspace/models/README.md`](workspace/models/README.md)

```powershell
git clone https://github.com/PatrickDev-it/sistemista.git
cd sistemista
git clone https://github.com/PatrickDev-it/sysops-agent.git
cd sysops-agent
py -3.12 -m venv .venv
.\.venv\Scripts\python -m pip install --upgrade pip
.\.venv\Scripts\python -m pip install -e .
$env:SISTEMISTA_LLAMA_SERVER_BIN = "C:\path\to\llama-server.exe"
$env:SISTEMISTA_ORACLE = "0"
.\.venv\Scripts\sistemista "inspect disk pressure" --workspace C:\safe\disposable-workspace
.\.venv\Scripts\sysops-agent "inspect disk pressure" --workspace C:\safe\disposable-workspace
```

On Unix-like hosts, activate `.venv/bin/activate` and use POSIX paths. This path is available
Expand Down Expand Up @@ -136,7 +136,7 @@ until the validation evidence and release supply chain meet the promotion gate.

## Security and privacy

Read [SECURITY.md](SECURITY.md) before deployment or vulnerability reporting. Sistemista is
Read [SECURITY.md](SECURITY.md) before deployment or vulnerability reporting. SysOps Agent is
local-first, but an enabled remote oracle receives redacted operational context. Redaction is a
defense-in-depth control, not a guarantee that arbitrary sensitive content cannot leave the host.
Confinement is an application policy, not kernel isolation.
Expand Down
4 changes: 2 additions & 2 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

## Supported versions

Sistemista is an alpha research preview. No released version is currently supported for
SysOps Agent is an alpha research preview. No released version is currently supported for
production use. Security fixes are applied to `development` first and promoted only after the
repository's validation gates pass.

Expand All @@ -17,7 +17,7 @@ or coordinated disclosure depend on severity and reproducibility; this is not an

## Threat boundary

Sistemista executes generated commands on the operator's host. The current alpha does not claim:
SysOps Agent executes generated commands on the operator's host. The current alpha does not claim:

- process, filesystem, network, or privilege isolation;
- safe unattended operation;
Expand Down
14 changes: 8 additions & 6 deletions pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,13 @@ requires = ["setuptools>=77"]
build-backend = "setuptools.build_meta"

[project]
name = "sistemista"
name = "sysops-agent"
version = "0.1.0a1"
description = "Local-first, model-assisted system operations with bounded execution and audit trails"
readme = "README.md"
license = "Apache-2.0"
license-files = ["LICENSE", "NOTICE"]
authors = [{ name = "Sistemista contributors" }]
authors = [{ name = "SysOps Agent contributors" }]
requires-python = ">=3.12"
keywords = ["ai-agent", "llama-cpp", "local-first", "privacy", "sysops"]
classifiers = [
Expand Down Expand Up @@ -65,12 +65,14 @@ warn_redundant_casts = true
no_error_summary = true

[project.urls]
Homepage = "https://github.com/PatrickDev-it/sistemista"
Documentation = "https://github.com/PatrickDev-it/sistemista#readme"
Issues = "https://github.com/PatrickDev-it/sistemista/issues"
Source = "https://github.com/PatrickDev-it/sistemista"
Homepage = "https://github.com/PatrickDev-it/sysops-agent"
Documentation = "https://github.com/PatrickDev-it/sysops-agent#readme"
Issues = "https://github.com/PatrickDev-it/sysops-agent/issues"
Source = "https://github.com/PatrickDev-it/sysops-agent"

[project.scripts]
sysops-agent = "src.main:cli_entry"
# Compatibility alias retained during the public-alpha cycle.
sistemista = "src.main:cli_entry"

# ── Test configuration — the suite's own invariants ──────────────────────────
Expand Down
Loading