Changelog
ORYVIO has had no public releases yet. Below is the development log: what was done and verified, by date.
Hermes isolation on macOS
- The Hermes process runs in a macOS sandbox: outside network closed, only the link to the ORYVIO proxy remains.
- Writes are allowed only to the session folder, temp folders and granted project folders.
- Without the sandbox, and on Windows and Linux, launch is refused.
Turn cancellation and live checks
- Cancelling a turn and revoking access verified on real Hermes: the model request is aborted.
- Live Timeweb checks: model listing and the compatible API path work.
- An install guide for unsigned builds was prepared.
First launch of real Hermes
- A Hermes 0.23.1 package for Intel Macs was built from pinned sources.
- Hermes replied in an isolated session through the ORYVIO proxy; the provider key never entered the process.
- Hermes' calls to an external model catalogue at start-up were disabled.
Model proxy and Hermes package
- A local proxy: Hermes reaches models only through ORYVIO, with permission checks and a request budget.
- A Hermes package manifest with a hash for every file; checked before launch.
- A process supervisor with restarts and a circuit breaker.
Hermes Agent as SONNY's core
- Decision made: Hermes Agent becomes SONNY's main agent core inside ORYVIO.
- ORYVIO keeps ownership of accounts, licences, keys, permissions and data.
Account security and MCP
- Password change and an account security screen in the app.
- MCP server credentials saved in the system vault.
Personal: streaming and recovery
- Automated tests cover streaming replies, the model catalogue and reply recovery after a failure.
- Automated tests cover reopening the database, resuming a chat and switching model.
Account in the pilot
- The owner received a Personal test key, signed up and confirmed email in installed ORYVIO.
- MCP server discovery passed on a Mac.
Brand in the app
- The approved ORYVIO mark and logo in the app, the splash screen and icons.