Step through the architecture, data flow, safety model, and roadmap. Click "Next" to reveal each section.
HARP indexes your Git-tracked operational docs (runbooks, RCAs, configs) and provides citation-required search and evidence packs when alerts fire. Every answer traces to a file path.
Every answer must cite a source file. Uncited claims are rejected — never fabricated.
HARP diagnoses but never fixes. Risky actions require human approval via Git commit.
CLI tools work offline — no API, no network, no database. Works from a local Git clone.
Indexes any Git repo. Platform is separate from content. Fork and point at your docs.
Core Stage B services deployed and smoke-tested on a self-hosted Proxmox VM. Formal eval harness is Stage C.
Zero-dependency full-text search. Indexes Markdown, YAML, shell scripts, text.
harp/core/search.py6 endpoints: health, stats, search, evidence-pack, audit, reindex. Async.
:8100Alert payload → cited Markdown with action tiers and approval enforcement.
harp/evidence/generator.pyScans docs for YAML frontmatter compliance. Reports full/partial/none/exempt.
harp/cli/harp_audit.pyMaps Prometheus alert rules to runbooks. Gaps explicitly surfaced.
harp/cli/harp_coverage.pyChunk-level content manifest for drift detection and stable citation IDs.
harp/cli/harp_manifest.pyWhen a Prometheus alert fires, HARP searches, assembles evidence, classifies actions, and generates a cited pack — all in under 1 second.
Every suggested action is classified by risk. Tier R is auto-safe. Tier P+ requires human approval. Tier D is forbidden.
| Method | Path | Purpose | Auth |
|---|---|---|---|
GET | /health | Liveness probe | None |
GET | /stats | Index statistics | None |
POST | /search | Citation-first BM25 search | None (read-only) |
POST | /evidence-pack | Alert → evidence pack | Localhost; bearer in B+ |
POST | /audit/metadata | Compliance audit | Localhost; bearer in B+ |
POST | /reindex | Rebuild BM25 index | Localhost; bearer in B+ |
| Layer | Technology | Status |
|---|---|---|
| Search | BM25 (pure Python) | ✅ Live |
| API | FastAPI + Uvicorn | ✅ Live |
| Schemas | Pydantic 2 + JSON Schema | ✅ Live |
| Storage | Git + Markdown + SQLite | ✅ Live |
| Monitoring | Prometheus HA + AlertManager | ✅ Live |
| Runtime | Python 3.12 | ✅ Live |
| Embeddings | Ollama (planned) | 🔮 Stage F |
| MCP Server | Model Context Protocol | 🔮 Stage H |
Alert names slugified to [a-z0-9-]. Path containment verified before write.
API returns repo-relative paths only. Server layout never exposed.
Blocking ops in asyncio.to_thread(). /health never freezes during audits.
Localhost-only defaults. No credentials. GET/POST only.
UUID-based X-Request-ID on every request for audit trail.
500s return "Check server logs" — never raw exception strings.
Each stage has exit criteria, not deadlines. No stage ships until the previous is verified.
Stage B implemented. Formal eval harness pending (Stage C). 74/74 tests passing.
HARP indexes a CONTENT DIRECTORY — any Git repo. The platform is separate from the content.
Operational procedures with symptoms, components, resolution steps.
runbook.schema.jsonRoot cause analysis with severity, root_cause, timeline.
rca.schema.jsonIncident records with alert, affected_service, resolution.
incident.schema.jsonGenerated: trigger, citations, diagnostics, approval status.
evidence-pack.schema.jsonPolicy docs with scope, enforcement, compliance requirements.
guardrail.schema.jsonMulti-agent review records with findings and scope.
review.schema.json← View Business Version · HARP Project Hub · climacs.net
© 2026 Climacs IT Consulting