Merge pull request #11 from OnlyTerp/devin/1778800581-hermes-sota-refresh

* docs: refresh Hermes guide for v0.13

* docs: address v0.13 review notes

---------

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

Author: OnlyTerp

CHANGELOG.md

@@ -2,6 +2,27 @@
 
 Dated list of meaningful guide updates. Roughly [Keep a Changelog](https://keepachangelog.com) flavored.
 
+## 2026-05-14 — Hermes v0.13.0 Tenacity Refresh
+
+### Added
+- **Part 23 — Tenacity Stack** covering durable Kanban boards, worker lanes, `/goal`, Checkpoints v2, no-agent cron, provider plugins, and the v0.13 upgrade checklist
+- Google Chat coverage in Part 15 as the 20th messaging platform
+- Kanban worker-lane guidance in Part 18 for Codex/Claude/Gemini/OpenCode orchestration
+- v0.13 security-default guidance in Part 19: redaction on by default, guild-scoped Discord role allowlists, WhatsApp stranger rejection, and OAuth/auth.json TOCTOU fixes
+
+### Changed
+- README badges, "What's New", table of contents, architecture copy, and model tables now target Hermes v0.13.0 (v2026.5.7)
+- Part 9 model/provider guidance updated for May 2026 SOTA: Claude Sonnet 5 / Opus 4.7, GPT-5.5, Gemini 3.1, Kimi K2.6, DeepSeek V4, Qwen3.6, provider plugins, and media routing
+- Part 12 updated for dashboard Kanban/profile coverage
+- Part 14 updated for `/goal`
+- Part 16 updated for v0.13 debug/redaction language
+- Part 20 updated for Kanban-aware observability
+- Config templates, cron templates, benchmarks, localized READMEs, roadmap, outreach copy, and wizard defaults refreshed for the 24-part guide
+
+### Removed
+- v0.12-as-current framing from top-level guidance
+- Stale April 2026 model recommendations where May 2026 replacements are now the better default
+
 ## 2026-04-30 — Hermes v0.11/v0.12 Refresh
 
 ### Added

CONTRIBUTING.md

@@ -37,7 +37,7 @@ This guide is built in public. PRs welcome.
 ├── ECOSYSTEM.md
 ├── ROADMAP.md
 ├── LICENSE
-├── part1-setup.md … part22-latest-power-moves.md
+├── part1-setup.md … part23-tenacity-stack.md
 ├── diagrams/architecture.md
 ├── skills/
 │   ├── README.md

ECOSYSTEM.md

@@ -16,6 +16,7 @@ The canonical "where do I find X for Hermes" directory. Maintained alongside the
 - [`@modelcontextprotocol/server-google-drive`](https://www.npmjs.com/package/@modelcontextprotocol/server-gdrive) — Drive read
 
 ### First-party vendor MCPs
+- [`AWS Labs MCP servers`](https://github.com/awslabs/mcp) — AWS docs, CDK, cost, diagrams, and service-specific helpers
 - [`@cloudflare/mcp-server-cloudflare`](https://github.com/cloudflare/mcp-server-cloudflare) — Workers, KV, D1, R2
 - [`@supabase/mcp-server-supabase`](https://github.com/supabase-community/supabase-mcp/tree/main/packages/mcp-server-supabase) — Postgres + storage + auth
 - [`@stripe/mcp-server-stripe`](https://github.com/stripe/ai/tree/main/tools/modelcontextprotocol) — payments read + restricted writes
@@ -39,13 +40,13 @@ See [Part 17](./part17-mcp-servers.md) for install patterns and trust model guid
 
 ## Coding-agent integrations
 
-- [Claude Code](https://docs.claude.com/en/docs/claude-code) — `claude -p` + ACP
-- [OpenAI Codex CLI](https://github.com/openai/codex) — `codex -p`
-- [Gemini CLI](https://github.com/google-gemini/gemini-cli) — `gemini -p` (free tier via OAuth)
-- [OpenCode](https://github.com/sst/opencode) — multi-model orchestrator
+- [Claude Code](https://docs.claude.com/en/docs/claude-code) — `claude -p` + ACP; best unattended PR lane with Sonnet 5 / Opus 4.7
+- [OpenAI Codex CLI](https://github.com/openai/codex) — `codex -p`; strong sandboxed bug-fix lane with GPT-5.5/Codex models
+- [Gemini CLI](https://github.com/google-gemini/gemini-cli) — `gemini -p` (free tier via OAuth); best repo-scale read/research lane
+- [OpenCode](https://github.com/sst/opencode) — multi-model orchestrator; useful with Kimi K2.6 / GLM budget lanes
 - [Aider](https://aider.chat) — pair-programming REPL
 
-See [Part 18](./part18-coding-agents.md).
+See [Part 18](./part18-coding-agents.md) and [Part 23](./part23-tenacity-stack.md#2-add-worker-lanes-instead-of-giant-prompt-swarms).
 
 ---
 

README-ja.md

@@ -2,7 +2,7 @@
 
 > [英語版はこちら](./README.md) · このページは入口の要約。本文の章は英語のまま。
 
-[NousResearch/hermes-agent](https://github.com/NousResearch/hermes-agent)（v0.12.0 まで反映）向けの実戦ガイド + インストール可能な成果物（Skills・設定テンプレ・インフラスクリプト）。
+[NousResearch/hermes-agent](https://github.com/NousResearch/hermes-agent)（v0.13.0 まで反映）向けの実戦ガイド + インストール可能な成果物（Skills・設定テンプレ・インフラスクリプト）。
 
 ## ワンコマンドで起動
 
@@ -15,7 +15,7 @@ curl -sSL https://raw.githubusercontent.com/OnlyTerp/hermes-optimization-guide/m
 
 ## 主なコンテンツ
 
-- **23 章の本文**（README 内の章 + `part6`〜`part22`） — Curator、TUI、プラグイン、LightRAG、Telegram、MCP、セキュリティ、可観測性、リモートサンドボックス
+- **24 章の本文**（README 内の章 + `part6`〜`part23`） — Kanban、`/goal`、Checkpoints v2、Curator、TUI、プラグイン、LightRAG、Telegram、MCP、セキュリティ、可観測性、リモートサンドボックス
 - **13 個のインストール可能 Skill**（`skills/`） — 監査、バックアップ、依存スキャン、コストレポート、Telegram トリアージ、PR レビュー、受信トレイ整理、Hermes 週報、スパムフィルタ、会議準備 など
 - **5 つのプロダクション設定テンプレ**（`templates/config/`） — minimum / telegram-bot / production / cost-optimized / security-hardened
 - **インフラ一式**（`templates/compose/`, `templates/caddy/`, `templates/systemd/`, `scripts/`） — Langfuse セルフホスト、Caddy リバースプロキシ、systemd 強化、VPS ブートストラップ

README-zh.md

@@ -2,7 +2,7 @@
 
 > [English 完整版](./README.md) · 本页是入口摘要，章节正文仍为英文。
 
-实用指南 + 可安装制品（Skills、配置模板、基础设施脚本），针对 [NousResearch/hermes-agent](https://github.com/NousResearch/hermes-agent)（当前覆盖到 v0.12.0）。
+实用指南 + 可安装制品（Skills、配置模板、基础设施脚本），针对 [NousResearch/hermes-agent](https://github.com/NousResearch/hermes-agent)（当前覆盖到 v0.13.0）。
 
 ## 一键起步
 
@@ -15,7 +15,7 @@ curl -sSL https://raw.githubusercontent.com/OnlyTerp/hermes-optimization-guide/m
 
 ## 内容一览
 
-- **23 章正文**（README 内章节 + `part6` 到 `part22`） — Curator、TUI、插件、LightRAG、Telegram、MCP、安全、可观测性、远程沙箱
+- **24 章正文**（README 内章节 + `part6` 到 `part23`） — Kanban、`/goal`、Checkpoints v2、Curator、TUI、插件、LightRAG、Telegram、MCP、安全、可观测性、远程沙箱
 - **13 个可安装 Skill**（`skills/`） — 审计、备份、依赖扫描、成本报告、Telegram 分类、PR 审查、收件箱分类、Hermes 周报、垃圾过滤、会议准备 等
 - **5 套生产配置模板**（`templates/config/`） — minimum / telegram-bot / production / cost-optimized / security-hardened
 - **基础设施**（`templates/compose/`, `templates/caddy/`, `templates/systemd/`, `scripts/`） — Langfuse 自托管、Caddy 反代、systemd 硬化、VPS 引导脚本