Make Fleet AI Gateway safe for Hermes clients - #216

Merged

robinbraemer merged 28 commits into

mainfrom

hermes/ai-gateway-usability

Aug 11, 2026

Commits on Aug 10, 2026

feat(ai-gateway): add Hermes workload proxy

akua-agentos[bot]
authored and
robinbraemer
committed
5eec7dc
no-mistakes(review): Hardened Hermes proxy timeouts, probes, policy wiring, and redirects
robinbraemer
committed
a82af0e
no-mistakes(review): Hardened AI gateway proxy boundaries and cancellation
robinbraemer
committed
9bd12cc
no-mistakes(review): Scoped provider redirects and linked stream cancellation
robinbraemer
committed
a16ce23
no-mistakes(review): Harden proxy credential stripping and centralize Hermes migration workflow
robinbraemer
committed
3815bc1
no-mistakes(review): Correct Hermes provider selection and disable stream reconnects
robinbraemer
committed
b1afc00
no-mistakes(review): Block unsafe Hermes revision and bind auxiliary routes explicitly
robinbraemer
committed
3766e09
no-mistakes(review): Enforce Hermes zero-retry gate and disable auxiliary routing
robinbraemer
committed
891504b
no-mistakes(review): Protect leases on abort and normalize 205 responses
robinbraemer
committed
bb99983
no-mistakes(review): Bracket post-acquisition lease cleanup
robinbraemer
committed
b40f5af
no-mistakes(review): Release routing reservations on acquisition cancellation
robinbraemer
committed
83786fb
no-mistakes(review): Protect routing leases across acquisition bookkeeping cancellation
robinbraemer
committed
3276627
no-mistakes(review): Make routing lease handoffs cancellation-safe
robinbraemer
committed
52a7562
no-mistakes(review): Make routing ownership handoff interruptible and safe
robinbraemer
committed
27ed511
no-mistakes(review): Use interruption-safe resource ownership across gateway leases
robinbraemer
committed
1d81c4b
no-mistakes(review): Make gateway lease handoffs cancellation-safe
robinbraemer
committed
92c3336
no-mistakes(review): Use canonical router header sanitization
robinbraemer
committed
61efd0f
no-mistakes(review): Fix bounded token reads and preserve lease-release retries
robinbraemer
committed
d0756d7
no-mistakes(review): Restrict gateway destination and retry stream lease cleanup
robinbraemer
committed
50a94bb
no-mistakes(review): Bound stream cleanup and retain routing release ownership
robinbraemer
committed
d9fd77e
no-mistakes(review): Bound shared routing release retries
robinbraemer
committed
0682e2c
no-mistakes(review): Model routing ownership cleanup in cancellation test
robinbraemer
committed
2db7bc2
no-mistakes(document): Document Hermes proxy contract and clean Effect lint
robinbraemer
committed
c3c4c50
no-mistakes(review): Preserve responses through lease cleanup failures
robinbraemer
committed
faa3b5c
no-mistakes(document): Refresh workload identity guidance and routing typing
robinbraemer
committed
456d885
test(ai-gateway): keep provider layers scoped
robinbraemer
committed
7feccab

Navigation Menu

Uh oh!

Make Fleet AI Gateway safe for Hermes clients - #216

Make Fleet AI Gateway safe for Hermes clients#216
robinbraemer merged 28 commits into
mainfrom
hermes/ai-gateway-usability

Commits on Aug 10, 2026

feat(ai-gateway): add Hermes workload proxy

no-mistakes(review): Hardened Hermes proxy timeouts, probes, policy wiring, and redirects

no-mistakes(review): Hardened AI gateway proxy boundaries and cancellation

no-mistakes(review): Scoped provider redirects and linked stream cancellation

no-mistakes(review): Harden proxy credential stripping and centralize Hermes migration workflow

no-mistakes(review): Correct Hermes provider selection and disable stream reconnects

no-mistakes(review): Block unsafe Hermes revision and bind auxiliary routes explicitly

no-mistakes(review): Enforce Hermes zero-retry gate and disable auxiliary routing

no-mistakes(review): Protect leases on abort and normalize 205 responses

no-mistakes(review): Bracket post-acquisition lease cleanup

no-mistakes(review): Release routing reservations on acquisition cancellation

no-mistakes(review): Protect routing leases across acquisition bookkeeping cancellation

no-mistakes(review): Make routing lease handoffs cancellation-safe

no-mistakes(review): Make routing ownership handoff interruptible and safe

no-mistakes(review): Use interruption-safe resource ownership across gateway leases

no-mistakes(review): Make gateway lease handoffs cancellation-safe

no-mistakes(review): Use canonical router header sanitization

no-mistakes(review): Fix bounded token reads and preserve lease-release retries

no-mistakes(review): Restrict gateway destination and retry stream lease cleanup

no-mistakes(review): Bound stream cleanup and retain routing release ownership

no-mistakes(review): Bound shared routing release retries

no-mistakes(review): Model routing ownership cleanup in cancellation test

no-mistakes(document): Document Hermes proxy contract and clean Effect lint

no-mistakes(review): Preserve responses through lease cleanup failures

no-mistakes(document): Refresh workload identity guidance and routing typing

test(ai-gateway): keep provider layers scoped

Commits on Aug 11, 2026

test(ai-gateway): observe fetch URLs without rebuilding requests

no-mistakes(document): Clarify Fleet AI Gateway client documentation