Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
71 commits sit in this repo's top risk tercile, which is 33% of the 214scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 6.3 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
How this repo's commit mix shifts over time.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Risk | Top driver |
|---|---|---|---|---|---|---|
| 1 | aa67f494feat(host-mcp): vendor mcp-proxy-server at v0.4.1 | KAgent | 1mo ago | +8.7K -40 | 100%Elevated | more lines added than baseline |
| 2 | 11bad23cAdd Flux v2.8.8 component manifests | Flux | 1mo ago | +5.8K -8.9K | 100%Elevated | more lines added than baseline |
| 3 | 6d1afe9dMove k8s-mcp-server source into monorepo | KAgent | 1mo ago | +3.5K -636 | 99%Elevated | more lines added than baseline |
| 4 | 3c64e424feat: bootstrap vicegerent platform | Hermes Agent | 1mo ago | +10.5K -547 | 99%Elevated | more lines added than baseline |
| 5 | 5ad93852feat: mcp-cerbos-shim — argument-level MCP authorization, wired into agentgateway | KAgent | 1mo ago | +3.4K -25 | 98%Elevated | more lines added than baseline |
| 6 | d9aae179feat(host-mcp): supervisord supervision, rich CLI, enable/disable hot-reload | KAgent | 1mo ago | +773 -394 | 97%Elevated | more lines added than baseline |
| 7 | 1889822dfeat: add vicegerent hermes sandbox app + supporting platform wiring | Hermes Agent | 1mo ago | +1.5K -74 | 97%Elevated | more lines added than baseline |
| 8 | 04c48948Add host MCP control scaffold | KAgent | 1mo ago | +838 -0 | 96%Elevated | more lines added than baseline |
| 9 | f3f7dfc0refactor: consolidate 5 billing patches into 2 | Jairus Christensen | 1mo ago | +397 -471 | 95%Elevated | more lines added than baseline |
| 10 | 23927acbfeat(host-mcp): add textual TUI subcommand (k9s keybindings) | KAgent | 1mo ago | +600 -0 | 95%Elevated | more lines added than baseline |
| 11 | 793ac111feat(graphiti): tribal-knowledge store (FalkorDB + Graphiti MCP via agentgateway) | KAgent | 1mo ago | +474 -0 | 95%Elevated | more lines added than baseline |
| 12 | adcbfad1first commit | Jairus Christensen | 1mo ago | +879 -0 | 95%Elevated | more lines added than baseline |
| 13 | 88e6787eWire host MCP through agentgateway + supervisord lifecycle redesign | KAgent | 1mo ago | +773 -343 | 94%Elevated | more lines added than baseline |
| 14 | 026d2d05feat: add Langfuse usage tracing | KAgent | 1mo ago | +418 -1 | 93%Elevated | more lines added than baseline |
| 15 | 173f4d0bfeat(dashboard): persistent mTLS host tunnel for full dashboard access | KAgent | 1mo ago | +501 -2 | 93%Elevated | more lines added than baseline |
| 16 | f547efcbtest: MCP policy enforcement test suite | KAgent | 1mo ago | +333 -0 | 93%Elevated | more lines added than baseline |
| 17 | fa3bbf40Install claude-code + codex; mnemosyne MCP, OpenAI models + LLM routing, Hermes SOUL.md | KAgent | 1mo ago | +427 -24 | 93%Elevated | more lines added than baseline |
| 18 | 80d2fe98refactor(host-mcp): extract action logic for TUI readability | KAgent | 1mo ago | +267 -80 | 92%Elevated | more lines added than baseline |
| 19 | 25639304fix(langfuse): fix model-seed network policy and improve seeder | root | 1mo ago | +181 -37 | 91%Elevated | more lines added than baseline |
| 20 | 0a5501b5feat(mcps): add Tavily and Firecrawl kmcp MCPServers (credential-isolated web search/extract) | KAgent | 1mo ago | +278 -0 | 91%Elevated | more lines added than baseline |
| 21 | c98d0bcfAdd authenticated Langfuse and Hermes dashboard openers | KAgent | 1mo ago | +263 -0 | 90%Elevated | more lines added than baseline |
| 22 | 43177167feat: add authenticated Langfuse dashboard launcher | root | 1mo ago | +205 -0 | 90%Elevated | more lines added than baseline |
| 23 | b0d0a0a7feat(searxng): add self-hosted SearXNG in its own namespace | KAgent | 1mo ago | +209 -0 | 89%Elevated | more lines added than baseline |
| 24 | 670b02e7scripts: consolidate into two root CLIs (vicegerent, vicegerent-mcp) | KAgent | 1mo ago | +306 -133 | 89%Elevated | more lines added than baseline |
| 25 | 253c3a51feat(mcps): route Tavily/Firecrawl through agentgateway + consolidate into kmcp-system | KAgent | 1mo ago | +150 -17 | 89%Elevated | more lines added than baseline |
| 26 | da647524feat(agentgateway): patched guardrail-200 proxy image + repoint | KAgent | 1mo ago | +200 -1 | 89%Elevated | more lines added than baseline |
| 27 | 40ce4b65fix: cost accounting and agentburn MCP state.db path | Jairus Christensen | 1mo ago | +176 -0 | 87%Elevated | more lines added than baseline |
| 28 | 22c7abeffeat(host-mcp): add setup-host-mcp install script | KAgent | 1mo ago | +195 -1 | 87%Elevated | more lines added than baseline |
| 29 | e0c18ce1Carry MCP HTTP shutdown timeout patch | KAgent | 1mo ago | +176 -0 | 87%Elevated | more lines added than baseline |
| 30 | 8b2189e4fix(k8s-mcp-server): return tool errors not protocol errors | KAgent | 1mo ago | +140 -154 | 86%Elevated | more lines added than baseline |
| 31 | d9238ad2feat: per-sandbox restart job, /scripts move, model failover | Hermes Agent | 1mo ago | +182 -7 | 86%Elevated | more lines added than baseline |
| 32 | e14f62b8Dashboard tunnel: multi-agent generalization + native basic-auth login behind mTLS | KAgent | 1mo ago | +169 -123 | 85%Elevated | more lines added than baseline |
| 33 | 83e8a083scripts: add Slack manifest template and generator | root | 1mo ago | +102 -0 | 84%Elevated | more lines added than baseline |
| 34 | 60a1eac0feat(langfuse): seed model definitions with current pricing | root | 1mo ago | +104 -0 | 84%Elevated | more lines added than baseline |
| 35 | f36c6932fix: patch Tool Search context-length probe to eliminate ~30s startup openrouter.ai hang | KAgent | 1mo ago | +118 -0 | 84%Elevated | more lines added than baseline |
| 36 | 4140fd0fchore(deps): update dependency express to v4.22.2 | Renovate Bot | 1mo ago | +106 -80 | 83%Elevated | more lines added than baseline |
| 37 | a9488001fix(mcps): remove standalone kubernetes backend, fold into host | KAgent | 1mo ago | +133 -89 | 83%Elevated | more lines added than baseline |
| 38 | a68bf97dfeat(hermes): seed coding-agent config into PVC + enable readOnlyRootFilesystem (fix codex -32603 trust loop) | KAgent | 1mo ago | +124 -61 | 83%Elevated | more lines added than baseline |
| 39 | 75391bd2feat: bump agentgateway to v1.3.1 and add Cerbos controller | KAgent | 1mo ago | +104 -3 | 83%Elevated | more lines added than baseline |
| 40 | a26c3561feat: wire Slack bot credentials into hermes sandbox | KAgent | 1mo ago | +147 -6 | 82%Elevated | more lines added than baseline |
| 41 | 7d777ef3fix: patch _resolve_named_custom_runtime to preserve route name for billing | KAgent | 1mo ago | +105 -0 | 81%Elevated | more lines added than baseline |
| 42 | fa5853ebfix(install): handle stale Connect server and rotated-secret re-seed | KAgent | 1mo ago | +80 -26 | 81%Elevated | more lines added than baseline |
| 43 | ee258f17feat: load secrets-deny Cerbos policy as a persistent source | KAgent | 1mo ago | +135 -2 | 81%Elevated | more lines added than baseline |
| 44 | 270566c9feat: SSH key upload + hermes agent git push/pull wiring | KAgent | 1mo ago | +114 -1 | 79%Elevated | more lines added than baseline |
| 45 | 223dc4b7feat(k8s-mcp-server): add listContexts tool | KAgent | 1mo ago | +105 -0 | 79%Elevated | more lines added than baseline |
| 46 | 6a98bac1scripts: refine vicegerent CLI — agent subcommand, auto port-forward tests, remove ghostunnel/validate | KAgent | 1mo ago | +97 -89 | 79%Elevated | more lines added than baseline |
| 47 | 2e8ebff0feat(images): thin derived hermes-agent image on pinned upstream base | KAgent | 1mo ago | +121 -6 | 79%Elevated | more lines added than baseline |
| 48 | 766e98f6fix(hermes): keep MCP servers retrying after initial connection failure | KAgent | 1mo ago | +92 -0 | 78%Elevated | more lines added than baseline |
| 49 | 3236edf2fix: resolve billing_provider=custom by patching auth.py aliases | KAgent | 1mo ago | +89 -1 | 77%Elevated | more lines added than baseline |
| 50 | 19223a62feat(langfuse): add source:hermes-sdk / source:agentgateway-otel tags for easy filtering | KAgent | 1mo ago | +106 -0 | 77%Elevated | more lines added than baseline |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 200 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
Repowise tracks change history across 40 files in christensenjairus/vicegerent-agents. In the last 90 days 40 files were touched, 104 times in total, most often setup-secrets.sh. Every commit is scored for change risk from its size, spread and the history of the files it touches.
