[adiled]

A sweep of every hive's README against what its code does turned up code that was broken outright, some of it unsafe. That is fixed here, each fix pinned by a test, and the docs describe the fixed behaviour. Separately, Claude could not be reached through the openai-server hive on an installed humd; the last two commits fix why, and make the failure say so when it happens.

Security

• humd heard any tone from a connection that never said hello, so anything that could reach the socket could prompt without a key. A connection is now heard for nothing but its hello until a breath admits it.
• humd sent a sid's tones to every idle bee, so one bee could see another's blooms. Tones reach only the connections that prompted or attached under the sid.
• grpc listened on every interface with no auth, which reached a bash builder. It listens on 127.0.0.1 by default.
• twilio-sms never verified Twilio's signature; it does, against HUM_TWILIO_URL.
• paid-oracle took pending or reverted payments, and one payment bought any number of calls.

Could not start, or never worked

• gsm-modem opened its serial port twice. paid-oracle's installed bee got none of its settings. ollama-server's nurse was never started, and its port clashed with the forager's. vercel-ai's installed service restarted forever. wifi-p2p did not compile.
• Every forager's default model matched no nurse. With no model named, a prompt goes to any nurse with room.

Hangs, leaks, lost history

• anthropic-server always streamed (breaking the SDK's create()), dropped history, and could not carry a tool call through. ollama-server dropped history, hung on tool calls and leaked a connection per request. vercel-ai's tool calls stalled about 10 minutes.
• humd: a refused tool call hung its cell; a bloom whose peer left the ensemble hung until it expired, and now fails with a retryable nurse-gone; per-sid state grew forever; a second connection on one key did not close the first.
• hum-nest: wallClockMs was never enforced, and a cleanup race could kill a replacement cell.
• Smaller fixes in openai-server, web2, grpc, twilio-sms, dwarfstar and claude-repl.

Claude behind openai-server
On an installed humd, a stale openai-server process was refused by humd four times a second for three days (its hello named no role), and hum bee --list called its bees did-not-return. Restarted, it nestled, and every request for a claude model failed with spawn claude: the claude-cli nurse runs under launchd's PATH, which leaves out ~/.local/bin, where Claude Code's installer puts claude.

• hum_paths::program_dirs / find_program: PATH, then ~/.local/bin, ~/.cargo/bin, ~/.bun/bin, /opt/homebrew/bin, /usr/local/bin. claude-cli and claude-repl look there and in ~/.claude/local, take CLAUDE_CLI_PATH first (empty is unset, and their Orchfiles pass it from the environment of hum hive <hive> install), and name every place they looked when claude is in none. claude-cli logs which claude it found when it starts.
• A refused hello that names a bee entered here is kept as a refused advisory with its reason, counts toward reconnect-storm, and counts the bee as returned. hum bee --list prints the reason under a bee that is not nestled. A key nobody entered leaves nothing behind.
• humd logged at trace when HUM_LOG_LEVEL was unset, every iroh frame included: one machine's log passed 6 GB and buried the warnings hum doctor reads. It logs at info. HUM_LOG_LEVEL and the claude lookup are in hum(1).

Through this branch's openai-server and a nestled claude-cli, POST /v1/chat/completions for claude-haiku-4-5 answers, and so does wryme with a shop at http://127.0.0.1:14620/v1.

Left for a decision

• hum bee exit does not stick: a hive that enters itself re-enters on restart. A test pins it as intended.
• Any humd can join as a peer; there is no peer allowlist.
• A paid-oracle payment seen in public can be redeemed first by whoever sees it. The README says so.
• The nurse library and the docs name different propensity values; the TS client cannot release its link, so vercel-ai closes an idle one after 1 s.
• On the socket, a hello gets an echo with ok: true as it arrives and, when refused, a second under the same rid with ok: false.

Not run for real: no phone, GSM modem, live chain or Twilio account; those paths are tested with fakes.

claude-cli's models: the nurse advertised five models from May, so nothing newer than Opus 4.7, Sonnet 4.6 or Haiku 4.5 reached it through humd. It advertises every model served to every account, claude-fable-5-1 to claude-haiku-4-5 (14); the Mythos models and the deprecated claude-sonnet-4-5 are for CLAUDE_MODELS to name, which hum hive claude-cli install now passes from its environment (empty is the built-in list).

Also

• The openai-server tests' scripted upstream exits when its parent does; one killed run had left it serving for two days.
• vercel-ai approves esbuild's build in pnpm-workspace.yaml, as anthropic-server does, so a fresh pnpm install under pnpm 11 succeeds.
• The four field doc comments the sweep put in hum-nest/src/limits.rs moved into its //! header (tools/speech.py).

Verification, on this branch, macOS arm64:

• codegen --check, tools/speech.py, tools/paths.py: pass.
• Core: humd, ensemble, thrum-core, sim, hum-identity, hum-nest, hum-paths, hum, codegen, hum-thrum: pass. sim --test liveness failed once under load (a handshake timed out while every suite was building at once) and passed 5 of 5 alone; this branch does not touch it.
• Hives: bash, bp7, claude-cli, claude-repl, grpc, gsm-modem, ollama-server, paid-oracle, web2 (cargo test); twilio-sms (go test -race); openai-server, anthropic-server, vercel-ai (from a clean node_modules) (bun test); wifi-p2p (gradlew test); dwarfstar (make check): pass.
• CI: rust, mesh, conform, c, go, python, ts: pass.
• Installed from this branch on macOS (humd, hum, humctl by cargo install; claude-cli and openai-server by hum hive <hive> install, no CLAUDE_CLI_PATH): claude-cli finds ~/.local/bin/claude under launchd's PATH, openai-server lists all 14 claude models, and wme -p on a station at http://127.0.0.1:14620/v1 answers on claude-haiku-4-5, claude-sonnet-4-6, claude-haiku-5-5, claude-opus-5-5 and claude-fable-5-1.