feat(svos): v0.0.16 live on nh3-svos — app-judge enrolled and up (gen-large drafting, six local task models); owner grants pending

2026-10-18 16:34:58 -07:00
parent e2d2f63693
commit 4f5c01390d
3 changed files with 159 additions and 0 deletions
@@ -0,0 +1,31 @@
+# <data root>/config/apps/judge.toml on nh3-svos — app-judge 0.0.1 (U19), from apps/judge/examples/judge.toml at v0.0.16.
+# Prime 2026-10-18: drafting on gen-large (local, free); tasks may run on the six local chat models (the hermes runtime's
+# `models` in instance.toml). The gateway key (vault nh3-svos/svos-judge-gateway-key, LiteLLM alias svos-app-judge) is
+# scoped to exactly those six, so the /tasks model select offers exactly them.
+
+[gateway]
+base = "http://10.250.50.70:4000/v1"
+credential_env = "SVOS_JUDGE_GATEWAY_KEY"  # /etc/svos/judge.env (root 0600); a project-scoped key, never the shared one
+
+[propose]
+model = "gen-large"          # hosted_vllm qwen3.8-flash on fv-ml1 :8022 — free; step up only on Prime's call
+max_tokens = 4000
+
+[admit]
+scan_app = "app-terminal"
+
+[[routes]]
+role = "*"
+runtime = "hermes"
+model = "gen-large"
+
+[limits]
+models_seconds = 10
+propose_seconds = 120
+admit_seconds = 8
+route_seconds = 5
+catalog_seconds = 30
+concurrency = 8
+reply_bytes = 1048576
+brief_bytes = 262144
+health_seconds = 5
@@ -0,0 +1,30 @@
+# eshpfi configs/svos-apps/ (infra-ops, 2026-10-07, a737a06 refresh), modelled on svoperatingsystem
+# deployment/nh3-svos/svos-interface.service. The credential is /etc/svos/judge.env (root 0600, SVOS_APP_CREDENTIAL),
+# minted by enrollment on the private kernel listener. Listed in the qemu-ga quiesce hook (configs/qemu-ga/svos/50-svos).
+[Unit]
+Description=SVOS Judge app (app-judge, U19): model catalogue, drafted checks, admission and routing for task seats
+After=svos-kernel.service
+Requires=svos-kernel.service
+ConditionPathExists=/etc/svos/judge.env
+[Service]
+Type=simple
+User=svc-svos
+Group=svc-svos
+UMask=0077
+WorkingDirectory=/var/lib/svos
+EnvironmentFile=/etc/svos/judge.env
+Environment=SVOS_KERNEL_URL=http://127.0.0.1:8400
+Environment=SVOS_DATA_ROOT=/var/lib/svos
+Environment=SVOS_APP_LISTEN=127.0.0.1:8409
+ExecStart=/opt/svos/current/apps-env/bin/svos-judge
+Restart=on-failure
+RestartSec=3
+TimeoutStopSec=20
+KillMode=control-group
+NoNewPrivileges=yes
+ProtectSystem=strict
+ProtectHome=yes
+PrivateTmp=yes
+ReadWritePaths=/var/lib/svos
+[Install]
+WantedBy=multi-user.target