feat(agentos): fail closed Hermes workload gateway authorization

[akua-agentos]

P2: fail-closed Hermes workload gateway authorization

Exact reviewed candidate

• Head: 905f082674cf43eb40643bc7965f205bb271366b
• Tree: 7a8970bb38b8c9bbb48375490a5178cf5db8d0cc
• Base: b37fdc73c3d2125b9d8fb647e6e00ca214e319b2 (main at PR preflight)
• Independent review: APPROVE_EXACT_HEAD

Summary

This removes the modern runtime’s unsafe fallback behavior and establishes a fail-closed, Kubernetes-workload authorization seam for Hermes-guided provider access.

• Canonical workload policy and identity contracts replace Agent/Assignment-based authority in the modern path.
• Missing, disabled, stale, ambiguous, or revoked policy fails closed before provider credentials or forwarding.
• The canonical projected-token audience is used consistently.
• Legacy/static-token paths are not accepted as modern authorization proof.
• The budget seam remains deny-by-default until the downstream LC1/LC2 provider-access stack is present.

Verification

• Exact detached-checkout custody, tree/ancestry, and git diff --check verified.
• Focused security/runtime tests: 75/75, repeated.
• Egress Authz, Agentgateway, tooling, public policy-revocation probe, build, typecheck, Effect migration check, and site checks passed in independent review.

Deliberate scope boundary

This PR does not enable provider forwarding or automation. The dependent LC1+LC2 stacked PR supplies projected workload proxy wiring, atomic budget reservations, durable attempts, settlement/recovery, and provider forwarding.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	agentos-site	905f082	Commit Preview URL Branch Preview URL	Aug 12 2026, 04:10 PM