@oracle-agent/oracle 0.10.0 → 0.12.0

package/LICENSE

@@ -1,202 +1,116 @@
+Business Source License 1.1
 
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "[]"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright 2026 Oracle Agent contributors
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
+License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
+"Business Source License" is a trademark of MariaDB Corporation Ab.
+
+-----------------------------------------------------------------------------
+
+Parameters
+
+Licensor:             Christopher Gervais
+
+Licensed Work:        @oracle-agent/oracle
+                      The Licensed Work is (c) 2026 Christopher Gervais
+
+Additional Use Grant: You may make use of the Licensed Work, provided that
+                      you do not use the Licensed Work for a Competing
+                      Offering.
+
+                      A "Competing Offering" is a product or service offered
+                      to third parties, on a paid or unpaid basis, that
+                      provides the whole or substantially the whole of the
+                      functionality of the Licensed Work, including but not
+                      limited to any hosted, managed, or embedded service
+                      that exposes the Licensed Work's protocol catalog,
+                      prepare plane, or transaction-preparation interfaces
+                      to third parties.
+
+                      Internal use, evaluation, research, personal use, and
+                      use within your own organization that is not offered
+                      to third parties are expressly permitted.
+
+Change Date:          2030-08-03
+
+Change License:       Apache License, Version 2.0
+
+-----------------------------------------------------------------------------
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited
+production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works
+of the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or
+modified form from a third party, the terms and conditions set forth in this
+License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of
+Licensor or its affiliates (provided that you may use a trademark or logo of
+Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON
+AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+-----------------------------------------------------------------------------
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License
+   can be included in a program with software provided under GPL Version 2.0
+   or a later version. Licensor may specify additional Change Licenses
+   without limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+-----------------------------------------------------------------------------
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.
+
+For information about alternative licensing arrangements for the Licensed
+Work, contact the Licensor.

package/README.md

@@ -1,92 +1,71 @@
 # Oracle
 
-## Quickstart (unified CLI)
+## Quickstart (standalone CLI)
 
 ```bash
-npm i -g @oracle-agent/oracle
-oracle auth login claude   # or codex / grok OAuth
-oracle                     # native standalone chat
-oracle init --apply        # optional Hermes lanes + read plane, no keys
-oracle data serve          # loopback read/prepare plane on 127.0.0.1:8787
-oracle doctor              # verify
-# optional, explicit second step: signing stays a separate local package
-npm i -g @oracle-agent/operator
-oracle sign init
+npm i -g @oracle-agent/oracle@latest   # Node >= 20.19
+oracle --version
+oracle auth login claude               # or codex / grok
+oracle                                  # native Oracle chat
+oracle doctor                           # verify local posture
 ```
 
+Prefer an API key instead? `oracle auth api-key openrouter` accepts hidden
+interactive input. `oracle auth status` reports providers without printing
+credentials. Linux, Windows, and macOS apps are in beta.
+
 
 **Prepare-only multichain agent control plane.** Policy-bounded intents; your wallet signs.
 
 Specialist agent profiles, real protocol intents, self-custody by default,
 receipts or it didn't happen.
 
-Hermes is optional. Oracle can run its native chat directly with Claude, Codex,
-or Grok OAuth, a securely stored provider API key, or a custom OpenAI-compatible
-endpoint. Existing compatible Hermes installations are reused in automatic mode.
-OAuth tokens and stored API keys stay in the OS credential store when available,
-with a private `0600` local fallback.
+Built for [Hermes](https://github.com/NousResearch/hermes-agent), the
+open-source agent runtime from [Nous Research](https://nousresearch.com), but
+Hermes is optional.
+
+Oracle can run standalone model auth directly with API keys or Claude, Codex,
+and Grok OAuth. OAuth credentials use the OS keychain when available, with a
+private `0600` local fallback when keychain storage is unavailable.
 
 This package is **prepare-only**: it never takes a private key and never
-broadcasts. For agentic trading with **your** keys on **your** machine, install
-the companion [`@oracle-agent/operator`](https://github.com/demi-hl/oracle-operator)
-alongside it — same split we run ourselves.
+broadcasts. The owner-operated signer/executor is private infrastructure, is
+not published on npm, and is not part of holder onboarding. Never paste a seed,
+private key, vault passphrase, or signer token into Oracle chat.
 
 ---
 
-## Start in 5 steps
+## Start safely
 
-```bash
-# 1) install Oracle's public prepare plane
-npm i @oracle-agent/oracle@latest
-```
+1. Install the public CLI and authenticate a model provider as shown above.
+2. Run `oracle chain list`, then `oracle chain use <name>`.
+3. Use reads, research, quotes, simulations, and unsigned preparation.
+4. Review every prepared artifact in the wallet that will sign it.
+5. Treat only a confirmed transaction hash plus receipt as execution.
 
-```js
-// 2) prepare an artifact (no keys)
-import { data } from "@oracle-agent/oracle";
-const prepared = await data.call("hl-perps", "prepareOrder", { /* coin, side, size... */ });
-```
-
-**Path A — self-custody first:** review the prepared artifact and sign it with
-the owner/main wallet, browser wallet, smart account, hardware wallet, or
-protocol-native wallet. Oracle's public package stops at prepare: your wallet
-authorizes and broadcasts.
+Hermes is optional. To add its isolated runtime, specialist profiles, and local
+read plane later:
 
 ```bash
-# 3) optional owner-local operator package for unattended signing on YOUR machine
-npm i @oracle-agent/operator@latest
-
-# 4) put operator keys ONLY on your machine (example: HL/EVM hex key file)
-mkdir -p ~/.config/oracle/keys && chmod 700 ~/.config/oracle/keys
-# write key, then: npx oracle-vault encrypt ~/.config/oracle/keys/evm.key
-export HL_KEY_FILE=~/.config/oracle/keys/evm.key.vault.json
-export ORACLE_VAULT_PASSPHRASE='...'   # signer shell only — never in the agent chat
+oracle bootstrap
+oracle init --apply        # writes profiles + local HMAC attestation config; no wallet key
+oracle data serve          # loopback only: 127.0.0.1:8787
+oracle doctor
 ```
 
+Library users can prepare directly:
+
 ```js
-// Path B — owner-local operator key signs after your app confirms the action
-// (same host, your key, your policy; no model or remote agent custody)
-import { hlSignAndSubmit } from "@oracle-agent/operator";
-await hlSignAndSubmit(prepared, {
-  keyFile: process.env.HL_KEY_FILE,
-  userInitiated: true,
+import { data } from "@oracle-agent/oracle";
+const prepared = await data.call("hl-perps", "prepareOrder", {
+  /* coin, side, size, owner wallet address */
 });
+// Oracle stops here. The user's wallet reviews, signs, and submits.
 ```
 
-```bash
-# 5) recommended agent-process path: run the signer daemon so the agent sees
-# only ORACLE_SIGNER_URL + ORACLE_SIGNER_TOKEN, never the vault passphrase.
-npx oracle-signer
-#
-# Daemon signing requires the SAME HMAC secret in the preparer and the signer,
-# otherwise every sign fails with "ORACLE_STAMP_HMAC_SECRET missing in signer":
-export ORACLE_STAMP_HMAC_SECRET='long-random-secret'
-```
-
-`ORACLE_AUTONOMOUS_TRADING=1` is only for trusted, owner-controlled direct-exec
-code running locally with your policy and caps. It is not a permission bit for a
-model or remote agent process; use `oracle-signer` for the agent-facing path.
-
-Full vault / multi-chain / daemon detail → operator [SETUP](https://github.com/demi-hl/oracle-operator/blob/main/SETUP.md).
+See [SETUP.md](SETUP.md) for clean installation and troubleshooting,
+[docs/holder-beta.md](docs/holder-beta.md) for the Locals-only launch gate, and
+[docs/buzz-integration.md](docs/buzz-integration.md) for the Buzz HTTP contract.
 
 ---
 
@@ -122,7 +101,7 @@ loop.
 | Authority | prompt-level "be careful" | signed grant: chain, spend, targets, TTL — enforced by your wallet, not by us |
 | Destinations | whatever the model emits | reviewed per-chain allowlist, fail-closed |
 | Slippage | fixed % | live guard recomputed per leg, hard 100 bps cap |
-| Proof | model says "done" | hash + receipt + balance delta or it failed |
+| Proof | model says "done" | hash + verified successful on-chain receipt + expected balance delta or it failed |
 | Surface | swap only | swaps, bridges, perps, vaults, yield, NFTs, intents |
 
 ## Architecture
@@ -150,9 +129,9 @@ Three planes, and the boundary between them is mechanically enforced:
 - **Policy plane** (public) — destination allowlists, slippage guards, route and
   vault attestations, grant schema. Holds no keys; constrains what a signer may
   be asked to do.
-- **Exec plane** (optional companion) - signing and broadcast live in
-  [`@oracle-agent/operator`](https://github.com/demi-hl/oracle-operator) on
-  your machine with your key. Not in this package or its npm artifact.
+- **Exec plane** (private, optional) — signing and broadcast live only in
+  separately operated owner infrastructure. It is not published on npm, not in
+  this artifact, and not available to holder installs.
 
 `test/custody-boundary.test.mjs` walks the import graph and fails if any public
 module reaches wallet key material or a house signer. The split is a test, not a
@@ -208,18 +187,24 @@ known answer. This matters: the canonical QuoterV2 address also has bytecode on
 Base, but does not price that chain's pairs. A codesize check would have
 allowlisted the wrong contract.
 
-**30+ providers** in the read/quote catalog:
+**42 provider modules** in the read/quote catalog, covering **219 unique
+protocols/venues** across EVM, Solana, and Bitcoin (115 EVM + cross-chain, 98
+Solana venues backed by 101 verified Jupiter program IDs, 6 Bitcoin surfaces).
+One module can cover many protocols: the Jupiter module alone routes 98 Solana
+venues, so provider-module count and protocol count are different numbers.
 
 | Class | Providers |
 |---|---|
 | Chain / explorer | EVM JSON-RPC, Blockscout, Solana RPC, Bitcoin Esplora |
 | Market data | DexScreener, GeckoTerminal, DeFiLlama |
-| DEX / aggregator | Uniswap V3, Aerodrome, Curve, Balancer, LI.FI, ParaSwap, Odos, 0x, 1inch |
-| Intents | CoW Protocol |
+| DEX / aggregator | Uniswap V3/V4, Aerodrome, Curve, Balancer, LI.FI, ParaSwap, Odos, 0x, 1inch, HyperEVM DEXes |
+| Solana | Jupiter (98 venue labels, 101 verified program IDs) |
+| Intents | CoW Protocol, RFQ |
 | Perps / lending / yield | GMX v2, Morpho, Pendle |
 | Bridges | Across, Hop, Relay |
 | Venues | Hyperliquid (core perps + HIP-3 builder dexs + HIP-4 outcomes), Polymarket (read + local CLOB prepare) |
 | NFT | OpenSea, Satflow, Magic Eden (Solana) |
+| Bitcoin | mempool/Esplora, Ordinals, Runes, UniSat, Best-in-Slot, Satflow |
 
 Every provider and every scanner capability declares an honest tier —
 `read-only`, `quote-only`, `prepare`, or `intent`. **API coverage is not execution
@@ -289,10 +274,11 @@ owner-local source lane.** The short version:
 - Reads and quotes need **no keys**.
 - The public package exposes no signer, key vault, or broadcast path.
 - User wallets authorize prepared actions outside the public data plane.
-- Owner-local signing is shipped separately as `@oracle-agent/operator`; the
-  recommended agent-process path is `oracle-signer`. Its daemon exposes six
-  policy-bounded surfaces: `hl`, `poly`, `evm-swap`, `evm-bridge`, `btc`, and
-  `sol`, with explicit caps and fail-closed allowlists.
+- Owner-local signing exists only in separately operated private infrastructure;
+  it is not published on npm and is not a holder capability. When installed by
+  the owner, its generic signer exposes six policy-bounded surfaces: `hl`,
+  `poly`, `evm-swap`, `evm-bridge`, `btc`, and `sol`, with explicit caps and
+  fail-closed allowlists.
 
 ### Action vocabulary and execution planes
 
@@ -301,9 +287,10 @@ Oracle keeps capability and authorization separate:
 - Public Oracle reads, quotes, simulates, and prepares unsigned artifacts.
 - **Path A:** owner/main, browser, smart-account, hardware, or protocol-native
   wallets sign the prepared artifact. This is the default self-custody path.
-- **Path B:** owner-local operator infrastructure may sign on the same host with
-  your key and your policy. For agent processes, prefer `oracle-signer` so the
-  agent receives only a signer URL/token and never the vault passphrase.
+- **Path B:** private owner-local infrastructure may sign on the same host with
+  the owner's key and policy. It is deployment-specific, unavailable to holder
+  installs, and must never expose a vault passphrase or signer credential to the
+  agent process.
 - The generic unattended signer exposes six bounded surfaces: `hl`, `poly`,
   `evm-swap`, `evm-bridge`, `btc`, `sol`. Each surface decodes its own
   envelope, enforces its caps, and refuses while its allowlists are empty.
@@ -335,6 +322,10 @@ npm run start:public
 # http://127.0.0.1:8799/
 ```
 
+This is an unauthenticated loopback development server, not a holder gate or a
+public deployment. Keep it off LAN/tailnet/public interfaces and place a tested
+admission gateway in front of any hosted beta.
+
 ## Model providers
 
 Oracle is a library. Drive it with Claude, GPT, Gemini, Grok, a local model, or
@@ -345,7 +336,7 @@ npx oracle-data         # local read plane on 127.0.0.1:8787
 npx oracle-data-mcp     # MCP stdio server (any MCP client); needs oracle-data up
 ```
 
-It is better under [Hermes](https://claude-code.nousresearch.com/docs), because
+It is better under [Hermes](https://hermes-agent.nousresearch.com/docs), because
 a trading stack is several workloads with opposite needs and **per-profile
 routing** gives each its own model, tools, and key scope: cheap wide context for
 research, a fast model for execution where latency is money, the strongest model
@@ -387,9 +378,9 @@ only read, simulate, and prepare — and a test enforces that so widening custod
 can't pass review quietly. An existing `SOUL.md` is never overwritten without
 `--force`, and `--force` writes a timestamped backup first.
 
-No Oracle account, no Oracle API key, no separate model billing. Oracle inherits
-whichever provider your Hermes already uses (Anthropic, OpenAI, Nous Portal, xAI,
-a local GGUF — anything Hermes supports).
+Oracle does not issue its own model credential. Standalone chat uses the OAuth
+login or API key the user configured; Hermes mode uses whichever provider that
+Hermes installation already supports.
 
 **Why "built for Hermes" and not just "works anywhere":** Oracle's read plane is
 an MCP server, so any MCP client can call it. But the *mesh* — per-lane memory,
@@ -500,18 +491,18 @@ oracle-data-mcp
 
 ## License
 
-[Apache-2.0](LICENSE).
-
-The code is open source. The **Oracle** name and marks are reserved; please
-don't imply endorsement by an official deployment when shipping a fork.
+[Business Source License 1.1](LICENSE) — source-available, not open source.
 
-### Operator hardening (0.4+)
+You may read, modify, self-host, and use Oracle freely for internal use,
+evaluation, research, and personal use. What you may not do is offer Oracle,
+or substantially its functionality, to third parties as a competing product
+or hosted service without a commercial license.
 
-Prefer the local signer daemon so the agent never sees the vault passphrase:
+Each version converts to **Apache-2.0** on its Change Date (four years after
+release). Versions `0.1.0` through `0.11.0` were published under Apache-2.0
+and remain under those terms.
 
-```bash
-npx oracle-signer   # reads the passphrase from the OS credential store
-# agent: ORACLE_SIGNER_URL + ORACLE_SIGNER_TOKEN only
-```
+The **Oracle** name and marks are reserved; please don't imply endorsement by
+an official deployment when shipping a fork.
 
-See [oracle-operator SETUP](https://github.com/demi-hl/oracle-operator/blob/main/SETUP.md).
+For commercial licensing, contact the maintainer.