docs(hermes): operator+author guide + cross-doc updates (H.4 + H.5)

Closes the Hermes slice. Adds the canonical Hermes operator
guide and updates every cross-cutting v1.0 doc to reflect the
new Stable surface.

docs/HERMES_AGENT.md (NEW):
  Complete operator + agent-author guide. 9 sections:
  1. Two access modes — TCL + HTTP API.
  2. The 18-tool curated default registry with capability +
     side-effect tags.
  3. Security model — what Hermes IS / IS NOT, deployment
     recommendations per scenario.
  4. CLI introspection — `hermes tools|inspect|invoke`.
  5. Authoring custom tools — register on HermesCore directly.
  6. Anthropic Tool Use quickstart + cross-API note.
  7. Compatibility-policy contract (Stable tier).
  8. Audit trail — every invocation appends to
     mythic/events.jsonl.
  9. Reference — file map + test files.

docs/security/threat_model.md:
  New asset A6 — Hermes Agent surface (HTTP + in-process).
  New 8-row threat matrix block (A6.1 → A6.8) covering remote
  attacker, brute-force token, DoS via Content-Length,
  path-escape attempt, unaudited invocation, custom-tool
  destructive operation, validation bypass, CSRF.

docs/INDEX.md:
  HERMES_AGENT.md added to operator docs.

docs/compatibility_policy.md:
  §3 Public-surface table gains the Hermes Agent surface as a
  Stable tier — 18 tool names, HTTP endpoints, Python class
  names, dataclass shapes all SemVer-stable from v1.0.0.

README.md:
  "What's new in v1.0.0" gains Hermes bullet.
  Command overview gains `hermes tools|inspect|invoke` and
  `surface hermes` entries.
  Documentation map adds HERMES_AGENT at row 15.

RELEASE_v1_0_0_2026-05-03.md:
  v1.0.0 scope updated to include Hermes (32 slices total,
  +633 tests). Phase table extended. Verification numbers
  bumped (2298 / 156 source files).
  New "Hermes Agent" subsection under "What v1.0.0 is".

tools/contract_audit.py + tests/test_contract_audit.py:
  hermes baseline allowlist entry REMOVED (no longer needed —
  docs/HERMES_AGENT.md exists). Both gates clean without the
  allowlist crutch.

Verification:
  pytest -q -> 2298 passed, 1 skipped, 109 subtests passed
  python tools/contract_audit.py --strict -> clean
  ruff check . -> clean
  mypy mythic_vibe_cli -> 156 source files, no issues

This commit closes the Hermes slice. v1.0.0 is now ready to
tag with Hermes included (Path A from the operator scope
question).

Author: hrabanazviking

README.md

@@ -64,6 +64,7 @@ Highlights of the v1.0 launch (full detail in `CHANGELOG.md`):
 - **Governance commands** — `mythic-vibe review architecture` produces a quarterly-review checklist. `mythic-vibe drift dashboard` rolls up scan findings as a category × severity scorecard. `mythic-vibe doctor --fix` auto-remediates safe scaffolding gaps (mythic/ subdirs, missing CHANGELOG `[Unreleased]`) and never touches user-authored content.
 - **Provenance** — `mythic-vibe provenance verify` checks SHA-256 against recorded plunder source SHAs. `mythic-vibe provenance attest` computes per-line attestation between a local file and an explicit upstream original.
 - **Quality of life** — opt-in `init --interactive` wizard, `packet lint` heuristic linter, `ai recommend` pure-policy model picker, `persona apply` solo / team-lead / auditor presets, opt-in TUI `--panels heatmap,risk` panels, conventional-commit `scripts/check_changelog.py --classify`.
+- **Hermes Agent** — programmatic control plane for any external AI agent. Two access modes (TCL Python in-process + HTTP API) share one core (`mythic_vibe_cli/agent_api/`). 18 curated tools cover status, doctor, drift, packet creation/lint, verify, reflect, ai recommend, provenance verify, workflow lineage, persona, plugin doctor, artifact read/list, recent events. Every invocation audited via the existing event-log primitive. See [`docs/HERMES_AGENT.md`](docs/HERMES_AGENT.md).
 - **Distribution** — three channels via `.github/workflows/release.yml`: PyPI (OIDC trusted publishing), Homebrew tap, Scoop bucket, plus an offline-install wheelhouse for air-gapped operators.
 - **Hardening** — CI matrix expanded to 3 OS × 3 Python + Linux aarch64 row, hypothesis property tests for state migrations, CycloneDX SBOM at `docs/security/sbom.json`, threat model at `docs/security/threat_model.md`.
 
@@ -676,6 +677,8 @@ Mythic Vibe CLI exposes the following command families. Run `mythic-vibe <comman
 - `ai providers|test|run|stream|ingest-response|models|telemetry|route|recommend` — optional AI provider integrations. PH-20: `recommend` is a pure-policy model picker against the static catalog
 - `persona apply|show` — PH-20: opt-in operator presets (`solo` / `team-lead` / `auditor`) writing `mythic/persona.json`
 - `slash list|inspect` — inspect + introspect the slash-command catalog (built-in + plugin-contributed)
+- `hermes tools|inspect|invoke` — v1.0 / Hermes: list + inspect + invoke the curated agent-tool surface from the CLI without HTTP. See [`docs/HERMES_AGENT.md`](docs/HERMES_AGENT.md).
+- `surface hermes [--bind ADDR --port N --token TOKEN]` — v1.0 / Hermes: launch the token-protected HTTP API for external agents.
 
 ### Operator helpers
 - `examples` — copy-paste command examples
@@ -759,7 +762,8 @@ If you do not know where to stand, begin here and follow the stones in order:
 12. `docs/security/threat_model.md` — assets, attackers, mitigations (with file:line anchors)
 13. `docs/security/sbom.json` — CycloneDX v1.6 dependency manifest
 14. `docs/governance/quarterly_review.md` — architecture-review cadence + agenda
-15. `docs/RELEASE_CHECKLIST.md` — pre-tag manual gates + tag-driven distribution flow
+15. `docs/HERMES_AGENT.md` — v1.0 agent control plane (TCL + HTTP API)
+16. `docs/RELEASE_CHECKLIST.md` — pre-tag manual gates + tag-driven distribution flow
 16. `packaging/README.md` — PyPI / Homebrew / Scoop / wheelhouse channel inventory
 17. `packaging/WHEELHOUSE.md` — offline-install recipe
 18. `DEVLOG.md` — chronological continuity record

RELEASE_v1_0_0_2026-05-03.md

@@ -10,17 +10,42 @@
 
 The first stable release of Mythic Vibe CLI. Closes both
 PH-19 (Distribution + Hardening, 9 slices) and PH-20
-(Polish + v1.0.0 Launch, 17 slices). The audit-remediation
-cycle that began on 2026-05-02 with a 7-phase fake/temp/pseudo
-sweep ends here, having delivered the full v1.0 launch gate
-without leaving any dangling deferrals inside the v1.0 scope.
+(Polish + v1.0.0 Launch, 17 slices), plus the post-PH-20
+**Hermes Agent control plane** (6 slices: H.0 → H.5). The
+audit-remediation cycle that began on 2026-05-02 ends here,
+having delivered the full v1.0 launch gate without leaving any
+dangling deferrals inside the v1.0 scope.
 
 Compatibility-policy v1.0 (`docs/compatibility_policy.md`) is
 now binding: SemVer rules apply from this release onward;
 deprecations follow the documented announce → wait one minor
 → remove cadence; the public surface tier table in §3 is the
 authoritative answer to "is X stable?"
 
+### Hermes Agent (added post-PH-20, in v1.0 scope)
+
+A complete programmatic control plane that lets any external AI
+agent see and do everything Mythic Vibe CLI exposes. Two access
+modes share one core (`mythic_vibe_cli/agent_api/`):
+
+- **TCL** (Tool Calling Library) — in-process Python:
+  `from mythic_vibe_cli.agent_api import HermesAgent`.
+- **HTTP API** — token-protected JSON endpoints over a stdlib
+  HTTP server: `mythic-vibe surface hermes`.
+
+18 curated tools cover status / doctor / drift / state / checkin
+/ packet create+lint / verify / reflect / review architecture /
+ai recommend / provenance verify / workflow lineage / persona /
+plugin doctor / artifact read+list / recent events. Every tool
+declares capabilities (PH-20.3 vocabulary) + side-effect tags.
+Every invocation appends an audit line to `mythic/events.jsonl`.
+
+Hermes adds **+74 tests** (2224 → **2298 passing**). Stable
+surface under the binding compatibility-policy from this
+release. See `docs/HERMES_AGENT.md` for the operator + agent-
+author guide and `docs/security/threat_model.md` §A6 for the
+8-row threat matrix specific to Hermes.
+
 ---
 
 ## How v1.0.0 was built
@@ -29,7 +54,8 @@ authoritative answer to "is X stable?"
 |-------|-------|--------|------------|
 | PH-19 | Distribution + Hardening | 9 (19.0 → 19.8) | 1665 → 1987 (+322) |
 | PH-20 | Polish + v1.0.0 Launch | 17 (20.0 → 20.7 + 20.A → 20.I) | 1987 → 2224 (+237) |
-| **Total** | **26 slices** | **+559 tests** |
+| Hermes | Agent control plane | 6 (H.0 → H.5) | 2224 → 2298 (+74) |
+| **Total** | **32 slices** | **+633 tests** |
 
 The work was driven by two chained Volmarr directives:
 
@@ -46,10 +72,10 @@ Every commit independently green; no batching.
 
 ## Verification at the v1.0.0 cut
 
-- **Tests:** `python -m pytest -q` → **2224 passed, 1 skipped, 109 subtests passed**.
+- **Tests:** `python -m pytest -q` → **2298 passed, 1 skipped, 109 subtests passed**.
 - **Lint:** `ruff check mythic_vibe_cli tests scripts tools` → clean.
-- **Types:** `mypy mythic_vibe_cli` → no issues found in **152 source files**.
-- **Contract audit:** `python tools/contract_audit.py` → clean.
+- **Types:** `mypy mythic_vibe_cli` → no issues found in **156 source files**.
+- **Contract audit:** `python tools/contract_audit.py --strict` → clean (no baseline allowlist needed for Hermes — `docs/HERMES_AGENT.md` is the documentation of record).
 - **SBOM:** `docs/security/sbom.json` regenerable via `python scripts/regenerate_sbom.py`.
 - **Coverage:** ≥ 82% (consistent with the post-19.0 baseline).