feat(hermes): default SOUL.md overrides runner identity with contract identity

Author: mostlydev

internal/driver/hermes/config.go

@@ -120,6 +120,46 @@ func WriteEffectiveAgents(workspaceDir, agentHostPath, clawdapusMD string) (stri
 	return agentsPath, nil
 }
 
+// WriteDefaultSoul writes a Clawdapus-generated SOUL.md to the Hermes home
+// directory. This pre-empts the Hermes runner's default identity seeding
+// ("You are Hermes, an AI assistant made by Nous Research") and establishes
+// the agent's own identity from its service name.
+//
+// The generated soul keeps the voice/craft guidance that makes Hermes agents
+// effective (concise, no sycophancy, varied structure) while replacing the
+// runner-branded identity with the agent's Clawdapus identity.
+func WriteDefaultSoul(homeDir, agentName, podName string) error {
+	soul := fmt.Sprintf(`# %s
+
+You are %s, an agent in the %s pod. Your identity, role, and operating rules
+are defined in your contract (AGENTS.md in your workspace). Follow your contract
+as your primary authority.
+
+Do not identify as Hermes, a generic assistant, or any identity other than %s.
+When asked who you are, answer from your contract identity.
+
+## Voice
+
+Be direct. Lead with the answer, not the reasoning. Match the energy of whoever
+you are talking to. Technical depth for technical people. Terse for terse.
+
+Do not use emojis. Use unicode symbols for visual structure when helpful.
+
+No sycophancy ("Great question!", "I'd be happy to help"). No filler
+("Here's the thing", "It's worth noting"). No hype words ("revolutionary",
+"game-changing", "seamless").
+
+Vary sentence length and structure. Write like a person, not a template.
+Most responses are short. Cut anything that does not earn its place.
+`, agentName, agentName, podName, agentName)
+
+	soulPath := filepath.Join(homeDir, "SOUL.md")
+	if err := os.WriteFile(soulPath, []byte(soul), 0o644); err != nil {
+		return fmt.Errorf("write default SOUL.md: %w", err)
+	}
+	return nil
+}
+
 func CopyPersonaSoul(personaHostPath, homeDir string) error {
 	soulPath := filepath.Join(personaHostPath, "SOUL.md")
 	info, err := os.Stat(soulPath)

internal/driver/hermes/driver.go

@@ -163,6 +163,10 @@ func (d *Driver) Materialize(rc *driver.ResolvedClaw, opts driver.MaterializeOpt
 		env["OPENAI_API_KEY"] = modelCfg.APIKey
 	}
 
+	// Always write a SOUL.md to pre-empt the Hermes runner's default identity.
+	// Persona SOUL.md takes priority; otherwise the Clawdapus default establishes
+	// the agent's identity from its service name and contract.
+	personaSoulWritten := false
 	if rc.PersonaHostPath != "" {
 		mounts = append(mounts, driver.Mount{
 			HostPath:      rc.PersonaHostPath,
@@ -173,6 +177,14 @@ func (d *Driver) Materialize(rc *driver.ResolvedClaw, opts driver.MaterializeOpt
 		if err := CopyPersonaSoul(rc.PersonaHostPath, homeDir); err != nil {
 			return nil, fmt.Errorf("hermes driver: %w", err)
 		}
+		if _, err := os.Stat(filepath.Join(homeDir, "SOUL.md")); err == nil {
+			personaSoulWritten = true
+		}
+	}
+	if !personaSoulWritten {
+		if err := WriteDefaultSoul(homeDir, rc.ServiceName, podName); err != nil {
+			return nil, fmt.Errorf("hermes driver: %w", err)
+		}
 	}
 
 	return &driver.MaterializeResult{

internal/driver/hermes/driver_test.go

@@ -175,6 +175,52 @@ func TestMaterializeWritesRuntimeLayout(t *testing.T) {
 	if result.Environment["TERMINAL_CWD"] != hermesWorkspaceDir {
 		t.Fatalf("unexpected TERMINAL_CWD: %q", result.Environment["TERMINAL_CWD"])
 	}
+
+	// Default SOUL.md should be written when no persona is configured
+	soulData, err := os.ReadFile(filepath.Join(runtimeDir, "hermes-home", "SOUL.md"))
+	if err != nil {
+		t.Fatalf("expected default SOUL.md: %v", err)
+	}
+	soulStr := string(soulData)
+	if !strings.Contains(soulStr, "# hermes") {
+		t.Fatalf("expected agent name in SOUL.md header, got: %s", soulStr[:100])
+	}
+	if !strings.Contains(soulStr, "fleet-echo") {
+		t.Fatalf("expected pod name in SOUL.md")
+	}
+	if strings.Contains(soulStr, "Nous Research") {
+		t.Fatal("default SOUL.md should not contain Hermes runner identity")
+	}
+}
+
+func TestMaterializePersonaSoulOverridesDefault(t *testing.T) {
+	rc, tmp := newTestRC(t)
+	personaDir := filepath.Join(tmp, "persona")
+	if err := os.MkdirAll(personaDir, 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(filepath.Join(personaDir, "SOUL.md"), []byte("Custom persona soul"), 0o644); err != nil {
+		t.Fatal(err)
+	}
+	rc.PersonaHostPath = personaDir
+
+	runtimeDir := filepath.Join(tmp, "runtime")
+	if err := os.MkdirAll(runtimeDir, 0o700); err != nil {
+		t.Fatal(err)
+	}
+
+	_, err := (&Driver{}).Materialize(rc, driver.MaterializeOpts{RuntimeDir: runtimeDir, PodName: "test"})
+	if err != nil {
+		t.Fatalf("Materialize returned error: %v", err)
+	}
+
+	data, err := os.ReadFile(filepath.Join(runtimeDir, "hermes-home", "SOUL.md"))
+	if err != nil {
+		t.Fatalf("expected SOUL.md: %v", err)
+	}
+	if string(data) != "Custom persona soul" {
+		t.Fatalf("expected persona SOUL.md to override default, got: %q", string(data))
+	}
 }
 
 func TestMaterializeCopiesPersonaSoul(t *testing.T) {