feat: rebuild as Hermes profile distribution

Author: codegraphtheory

.env.EXAMPLE

@@ -0,0 +1,10 @@
+# Copy this file to .env and fill in real values for your own machine.
+# Never commit .env.
+
+# Optional model provider key. Use your preferred Hermes provider instead if already configured.
+# optional
+OPENROUTER_API_KEY=
+
+# Optional token for GitHub-heavy smart contract repositories. Prefer gh auth when possible.
+# optional
+GITHUB_TOKEN=

.github/ISSUE_TEMPLATE/profile-improvement.md

@@ -0,0 +1,26 @@
+---
+name: Profile improvement
+description: Suggest an improvement to the Hermes profile template
+title: "Profile improvement: "
+labels: [enhancement]
+body:
+  - type: textarea
+    id: use_case
+    attributes:
+      label: Use case
+      description: What profile authoring problem should this solve?
+    validations:
+      required: true
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposal
+      description: What should change?
+    validations:
+      required: true
+  - type: textarea
+    id: risks
+    attributes:
+      label: Risks
+      description: Any safety, compatibility, or maintenance risks?
+---

.github/workflows/validate.yml

@@ -0,0 +1,31 @@
+name: Validate Hermes Profile Template
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: actions/setup-python@v6
+        with:
+          python-version: "3.11"
+      - name: Install validation dependencies
+        run: python -m pip install pyyaml
+      - name: Validate repository profile distribution
+        run: python3 scripts/validate_profile.py .
+      - name: Smoke-test profile generators
+        run: |
+          python3 scripts/new_profile.py \
+            --name ci-smoke \
+            --display-name "CI Smoke" \
+            --description "Smoke test generated profile" \
+            --output /tmp/ci-smoke
+          python3 /tmp/ci-smoke/scripts/validate_profile.py /tmp/ci-smoke
+          python3 scripts/generate_profile.py \
+            --params templates/profile.params.yaml \
+            --output /tmp/ci-params-smoke
+          python3 /tmp/ci-params-smoke/scripts/validate_profile.py /tmp/ci-params-smoke

.gitignore

@@ -0,0 +1,14 @@
+.env
+*.db
+*.db-shm
+*.db-wal
+logs/
+sessions/
+memories/
+workspace/
+plans/
+local/
+cache/
+__pycache__/
+.pytest_cache/
+.DS_Store

AGENTS.md

@@ -0,0 +1,37 @@
+# ChainForge: Agent Instructions
+
+This repository is a Hermes Agent profile distribution for ChainForge, a production blockchain engineering agent. It is designed to be maintained by AI coding agents.
+
+## Hard rules
+
+1. Never commit secrets. `.env` is forbidden. `.env.EXAMPLE` is allowed.
+2. Preserve `distribution.yaml` at the repository root.
+3. Keep the profile installable with `hermes profile install <source>`.
+4. Run `python3 scripts/validate_profile.py .` after substantive edits.
+5. Keep instructions concrete and operational.
+6. Do not claim tools, audits, partnerships, deployed contracts, community channels, or integrations that are not verified.
+7. Do not weaken ChainForge refusals around rug pulls, hidden controls, exploit activity, or deceptive tokenomics.
+
+## Blockchain profile maintenance
+
+When editing ChainForge:
+
+1. Preserve the security-first identity in `SOUL.md`.
+2. Keep EVM, Solana, Move, CosmWasm, tokenomics, governance, and audit-readiness scope accurate.
+3. Update `skills/chainforge-blockchain-engineering/SKILL.md` when adding reusable blockchain workflow guidance.
+4. Keep `config.yaml` and `distribution.yaml` aligned with files that actually exist.
+5. Run validation and at least one install smoke test before pushing.
+
+## Interactive profile creation
+
+If the user asks this profile to create another Hermes profile:
+
+1. Ask only for missing essentials: name, mission, target user, required integrations, and risk level.
+2. Write a params YAML file using `templates/profile.params.yaml` as the schema reference.
+3. Run `python3 scripts/generate_profile.py --params <params.yaml> --output <target-dir>`.
+4. Run `python3 <target-dir>/scripts/validate_profile.py <target-dir>`.
+5. Report the target path and validation output.
+
+## Handoff format
+
+When finishing, report files changed, commands run, validation output, and remaining manual steps.

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CodeGraphTheory
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -1,98 +1,112 @@
 # ChainForge
 
-> *I build chains that last. I protect value. I grow communities. I never ship garbage.*
+ChainForge is a Hermes Agent profile for serious blockchain engineering.
 
-ChainForge is an AI agent identity — a battle-hardened blockchain architect that ships production-grade smart contracts, protocols, and ecosystems. Every line of code is treated as a public good that must withstand adversarial environments, economic attacks, and the test of time.
+It is designed for builders who need production-grade help with smart contracts, protocol architecture, tokenomics, security reviews, audits, and deployment planning. ChainForge is intentionally paranoid about adversarial systems and intentionally strict about financial integrity.
 
-**If you find this useful, [star the repo](https://github.com/codegraphtheory/chainforge) — it tells me this work matters.**
+## What ChainForge is for
 
----
+Use ChainForge when you want help with:
 
-## What This Is
+- Solidity, Foundry, Hardhat, OpenZeppelin, Solady, and EVM protocol work.
+- Smart contract implementation, review, testing, and hardening.
+- Threat models for contracts, protocols, bridges, governance, oracles, and token systems.
+- Tokenomics and incentive design.
+- Audit readiness and security checklists.
+- Deployment plans with multisig, timelock, verification, monitoring, and incident response.
+- Cross-chain architecture across EVM, Solana, Move, and CosmWasm when enough context is available.
 
-This repository contains the SOUL.md of ChainForge — an immutable identity document that defines how this agent thinks, builds, and decides. It's not a library, a framework, or a product. It's a constitution.
+ChainForge will not help build rug pulls, hidden admin traps, exploit tooling against live users, fake audit claims, or deceptive tokenomics.
 
-When ChainForge is asked to build something, it reads this document first. Every pull request, every architecture decision, every tradeoff is evaluated against the principles here.
+## Install
 
----
+```bash
+hermes profile install github.com/codegraphtheory/chainforge --alias
+chainforge chat
+```
+
+If you do not want an alias:
 
-## The Five Pillars
+```bash
+hermes profile install github.com/codegraphtheory/chainforge --name chainforge
+hermes -p chainforge chat
+```
 
-| Pillar | What It Means |
-|--------|--------------|
-| **Security Above All** | Default to paranoid threat modeling. One vulnerability can destroy millions. |
-| **Efficiency as Ethics** | Wasted gas is theft from users. Optimize ruthlessly without sacrificing auditability. |
-| **Community as Co-Owners** | Users are stakeholders, not customers. Transparency and fair incentives are mandatory. |
-| **Engineering Excellence** | Code must be verifiable, maintainable, and upgrade-safe. No "move fast and break things." |
-| **Financial Integrity** | Tokenomics must be mathematically sound. No rug pulls, predatory farming, or asymmetric extraction. |
+## Configure model credentials
 
----
+ChainForge includes `.env.EXAMPLE` with optional provider keys. If your default Hermes setup already has model credentials, you may not need to add anything.
 
-## How to Use ChainForge
+If needed:
 
-ChainForge operates as an AI agent. To work with it:
+```bash
+cp ~/.hermes/profiles/chainforge/.env.EXAMPLE ~/.hermes/profiles/chainforge/.env
+# edit ~/.hermes/profiles/chainforge/.env
+```
 
-1. **Load SOUL.md as context** — Provide this document as system-level instructions to the agent.
-2. **Describe what you want to build** — Be specific about the chain, the tokenomics, the threat model.
-3. **Get production-grade code** — ChainForge delivers complete, copy-paste-ready smart contracts with security rationale.
+Never commit `.env` or real credentials.
 
-### Example Prompt
+## Example prompts
 
+```text
+Review this Solidity repository for reentrancy, role-control, oracle, and upgradeability risks. Run the relevant tests and summarize findings by severity.
 ```
-I am deploying a new ERC-20 token with staking rewards on Base.
-Supply: 1 billion. No mint authority. 2% transfer fee going to stakers.
-Multisig governance after 6 months. Audit planned with Trail of Bits.
-Build the contracts.
+
+```text
+Design an ERC-4626 vault with guarded deposits, pausable emergency controls, and Foundry fuzz tests. Explain the accounting invariants.
 ```
 
-ChainForge will respond with:
-- Complete Solidity contracts (OpenZeppelin-based, gas-optimized)
-- Deployment scripts (Foundry/Hardhat)
-- Test suite with fuzzing targets
-- Risk analysis and known attack vectors
-- Tokenomics breakdown and incentive analysis
+```text
+Threat model this bridge architecture. Focus on validator compromise, replay, finality assumptions, message ordering, and economic security.
+```
 
----
+```text
+Analyze this tokenomics design for emissions sustainability, governance capture, liquidity risks, and user incentive alignment.
+```
 
-## What ChainForge Will NOT Build
+## Validate the profile
 
-ChainForge will politely decline any request involving:
+From this repository:
 
-- Obfuscated contracts or hidden admin keys
-- Ponzi-like tokenomics or unsustainable yields
-- Front-running or sandwich attacks
-- Unaudited mainnet deployments
-- Any form of rug-pull mechanics
+```bash
+python3 scripts/validate_profile.py .
+```
 
----
+## Local development
 
-## Supported Chains and Standards
+Clone and install locally:
 
-| Category | Technologies |
-|----------|-------------|
-| **EVM** | Solidity, Foundry, Hardhat, OpenZeppelin |
-| **Solana** | Rust, Anchor, SPL Token, Token-2022 |
-| **Move** | Sui, Aptos, Movement |
-| **Cosmos** | CosmWasm, IBC |
-| **L2 / ZK** | Arbitrum, Optimism, Base, zkSync, StarkNet |
-| **Standards** | ERC-20, ERC-721, ERC-1155, ERC-4626, ERC-4337, SPL Token |
+```bash
+git clone https://github.com/codegraphtheory/chainforge.git
+cd chainforge
+python3 scripts/validate_profile.py .
+hermes profile install . --name chainforge-local --yes
+hermes -p chainforge-local chat
+```
 
----
+## Generate a related profile
 
-## Why Star This Repo?
+ChainForge is based on the CodeGraphTheory Hermes profile template and includes the deterministic profile generator.
 
-- **It keeps the agent honest** — a public, immutable constitution means every decision is auditable.
-- **It signals quality** — stargazers tell the community this agent has standards.
-- **It funds future work** — more visibility means more edge cases, more feedback, better output.
+Edit `templates/profile.params.yaml`, then run:
 
-[⭐ Star codegraphtheory/chainforge](https://github.com/codegraphtheory/chainforge)
+```bash
+python3 scripts/generate_profile.py \
+  --params templates/profile.params.yaml \
+  --output ../my-blockchain-profile
 
----
+cd ../my-blockchain-profile
+python3 scripts/validate_profile.py .
+```
 
-## License
+## Files to customize
 
-MIT — free to fork, extend, and use. The SOUL.md itself is meant to be immutable, but if you fork it, you're building your own agent with your own principles. That's the point.
+- `SOUL.md`: ChainForge identity, operating principles, scope, refusals, and output contract.
+- `distribution.yaml`: Hermes profile distribution metadata.
+- `config.yaml`: model, toolsets, terminal, memory, security, and approval defaults.
+- `.env.EXAMPLE`: environment variable documentation only.
+- `skills/`: reusable procedures bundled with the profile.
+- `AGENTS.md`: instructions for AI coding agents that maintain this repository.
 
----
+## License
 
-*"I am ChainForge. I build chains that last. I protect value. I grow communities. I never ship garbage."*
+MIT. See `LICENSE`.