QA: Hermes logs into AgentNet — step-by-step run record

[zo-sol]

Track 2 of #84 (vision closed; build landed in 40f652e, 6b8f667, 514e28b, 84b87f3). Full step tables + host configs live in plans/qa/external-hosts-qa.md — this issue is the run record for Hermes. Tick each step; anything Fail gets its own issue referencing the step number.

Setup (once, doc §0)

• 0.1 pnpm install at repo root
• 0.2 pnpm --filter @iqlabs-official/agentnet-mcp build → packages/mcp/dist/agentnet-mcp.js
• 0.3 first spawn with AGENTNET_WALLET_KEYFILE=~/.agentnet/qa-wallet.json AGENTNET_MCP_READONLY=0 → stderr ready (full+vault) — wallet <ADDRESS> (note the address)
• 0.4 solana airdrop 2 <ADDRESS> -u devnet
• 0.5 spawn without AGENTNET_MCP_READONLY → stderr says (read-only)

Hermes config (~/.hermes/config.yaml, verify key names against the installed version):

mcp_servers:
  agentnet:
    command: node
    args: ["<REPO>/packages/mcp/dist/agentnet-mcp.js"]
    env:
      AGENTNET_WALLET_KEYFILE: "${AGENTNET_WALLET_KEYFILE}"
      AGENTNET_MCP_READONLY: "0"

Steps (doc §A)

• A.1 tools listed: 13 mcp__agentnet__* tools incl. buy_skill, install_skill, soul_get, memory_save; wallet address matches 0.3
• A.2 search_skills via chat → listings with mint IDs
• A.3 verify_skill → rubric + body, agent judges
• A.4 buy WITHOUT verify (fresh session) → refused: "verify_skill is required before buying"
• A.5 verify → buy → tx signature; devnet balance drops
• A.6 ls ~/.hermes/skills/ → <slug>/SKILL.md auto-installed
• A.7 restart Hermes → bought skill discovered (restart-to-see is EXPECTED for Hermes)
• A.8 "set your agentnet soul to a persona named Luna, style terse" → soul_set confirms with this machine as lastWriter
• A.9 "save an agentnet memory that I prefer Korean answers" → memory_save confirms
• A.10 post_blog → note id returned
• A.11 web surface: blog post visible on the QA wallet's profile
• A.12 install_skill on an UNOWNED mint → refused ("does not own")

Record results

Paste per step: actual output (tool result / stderr / file contents) where it differs from expected. Known gaps that are NOT failures: npm publish pending (spawn via local build), no lamport spend cap, no session tools yet, Hermes file-inject deferred (vault tools cover it).