chore(changelog): subject-only rendering (drop commit body verbosity)

CHANGELOG.md and GitHub Release notes now render commit subjects only.
Full commit message body (why/how/validation data) stays in 'git log',
one click away via the SHA link. Keeps both surfaces skim-readable.

v0.3.2 release pages were 100+ lines per commit; this brings them down
to ~1 line per commit.

.github/workflows/release.yml

@@ -16,17 +16,54 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0  # full history needed for git-cliff
+          token: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Generate release notes
-        id: cliff
+      # ---- (1) Generate the GitHub Release body (latest only, no header) ----
+      # `--strip header` drops the static SemVer preamble so the release page
+      # shows just the per-version section, while CHANGELOG.md (below) keeps
+      # the header at the top of the file.
+      - name: Generate release notes (latest only)
+        id: cliff-release
         uses: orhun/git-cliff-action@v4
         with:
           config: cliff.toml
-          args: --latest --github-repo noonghunna/club-3090
+          args: --latest --strip header --github-repo noonghunna/club-3090
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           OUTPUT: RELEASE_NOTES.md
 
+      # ---- (2) Regenerate full CHANGELOG.md (all tags, with header) ----
+      - name: Regenerate CHANGELOG.md
+        uses: orhun/git-cliff-action@v4
+        with:
+          config: cliff.toml
+          args: --github-repo noonghunna/club-3090
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          OUTPUT: CHANGELOG.md
+
+      # ---- (3) Commit the regenerated CHANGELOG.md back to master ----
+      # The tag's commit doesn't include this auto-regen — but the GitHub
+      # Release page is correct (step 1), and master's CHANGELOG.md catches
+      # up ~1 min after tag push. Skipped if nothing changed.
+      - name: Commit CHANGELOG.md back to master
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git fetch origin master
+          git checkout -B master origin/master
+          # Re-run cliff against master HEAD so the regen reflects what master
+          # actually contains (the tag may not yet be on master if pushed from
+          # a feature branch; uncommon but handled).
+          git add CHANGELOG.md
+          if git diff --staged --quiet; then
+            echo "CHANGELOG.md unchanged — skipping commit."
+          else
+            git commit -m "chore(changelog): regenerate for ${{ github.ref_name }} [skip ci]"
+            git push origin master
+          fi
+
+      # ---- (4) Publish GitHub Release ----
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
         with:

cliff.toml

@@ -8,15 +8,40 @@
 # → release published.
 
 [changelog]
-# Header rendered once at top of every release body.
+# Header rendered once at top of CHANGELOG.md (preserved across full regens).
+# Use `--strip header` on `--latest` for GitHub Release bodies so they don't
+# duplicate this intro on every release page.
 header = """
+# Changelog
+
+Auto-generated from commit subjects by [git-cliff](https://git-cliff.org/) on tag
+push. Click any commit SHA below to see the full message body (why / how /
+validation data) — those live in `git log`, not here. Don't hand-edit; the file
+is regenerated on every tag.
+
+**Versioning:** SemVer in `0.x` — treat any minor bump as potentially breaking
+until `1.0`. Past CalVer tags (`v2026.05.09`, `v2026.05.10`) are preserved for
+history; SemVer takes over from `v0.3.0` onward.
+
+| CalVer tag | SemVer equivalent | Date |
+|---|---|---|
+| `v2026.05.09` | (≈ v0.1.0) | 2026-05-09 — first tagged release |
+| `v2026.05.10` | (≈ v0.2.0) | 2026-05-10 — stack reorg + Gemma 4 INT8 PTH unblock |
+
+---
+
 """
 
-# Body template — rendered per release (we use --latest so only one).
-# Tera templating syntax. Each commit shows as a bullet with PR link if present.
+# Body template — rendered per release. For `--latest` (GitHub Release) only
+# the most recent block renders; for full regen of CHANGELOG.md, every tagged
+# block renders in reverse-chronological order.
+#
+# **Subject-line only** — the commit's first line, with a link to the full
+# commit. Full body (why/how/validation data) lives in `git log` and is one
+# click away via the SHA link. Keeps CHANGELOG.md skim-readable.
 body = """
 {% if version %}\
-## What's in {{ version }}
+## {{ version }}{% if timestamp %} — {{ timestamp | date(format="%Y-%m-%d") }}{% endif %}
 
 {% else %}\
 ## Unreleased
@@ -30,21 +55,8 @@ body = """
 {% endfor %}
 {% endfor %}
 
----
-
-## Pinning to this release
-
-**Versioning:** SemVer in `0.x` — treat any minor bump as potentially breaking until `1.0`. Past CalVer tags (`v2026.05.09`, `v2026.05.10`) are preserved for history; SemVer takes over from `v0.3.0` onward.
-
-```bash
-git checkout {{ version }}
-```
-
-When posting cross-rig benchmark numbers ([disc #86](https://github.com/noonghunna/club-3090/discussions/86)), please include this version tag (or commit SHA) so others can reproduce against the same script revision.
-
-{% if previous.version %}\
-**Full diff:** [{{ previous.version }}...{{ version }}](https://github.com/noonghunna/club-3090/compare/{{ previous.version }}...{{ version }})
-{% endif %}\
+{% if version %}[Pin: `git checkout {{ version }}`]{% if previous.version %} · [Full diff](https://github.com/noonghunna/club-3090/compare/{{ previous.version }}...{{ version }}){% endif %}
+{% endif %}
 """
 
 footer = ""

scripts/quality-test.sh

@@ -177,6 +177,19 @@ if [[ -n "$DETECTED_MODEL" && "$DETECTED_MODEL" != "$MODEL" ]]; then
   MODEL="$DETECTED_MODEL"
 fi
 
+# hermesagent-20 runs its agent inside a Docker sandbox container. Localhost-style
+# URLs (localhost/127.x/[::1]) inside the container resolve to the container itself,
+# not the host's vLLM. Auto-set BENCHLOCAL_HERMES_RESOLVE_LOCALHOST=1 so benchlocal-cli
+# (a) adds --add-host=host.docker.internal:host-gateway to the sandbox container, and
+# (b) rewrites the model endpoint URL to use host.docker.internal:<port> for the
+# hermes-agent's outbound API calls. Skip if already set (user override) or if URL
+# already uses host.docker.internal / a non-loopback host (real LAN IP, k8s service).
+if [[ -z "${BENCHLOCAL_HERMES_RESOLVE_LOCALHOST:-}" ]] \
+   && [[ "$URL" =~ ^https?://(localhost|127\.|\[::1\]) ]]; then
+  export BENCHLOCAL_HERMES_RESOLVE_LOCALHOST=1
+  echo "[quality-test] localhost URL detected — auto-set BENCHLOCAL_HERMES_RESOLVE_LOCALHOST=1 for hermes sandbox endpoint rewrite" >&2
+fi
+
 # ---- run benchlocal-cli ------------------------------------------------------
 
 RESULTS_DIR="${ROOT_DIR}/results/quality"