feat(kanban): RULE_SET_VERSION 1.2.0 hole-rule follow-ups (HEL-3113)

hermes_cli/config_defaults.py

@@ -2205,6 +2205,22 @@
         # worker process (if still running host-locally) is terminated
         # before the reclaim.  0 disables stale detection entirely.
         "dispatch_stale_timeout_seconds": 14400,
+        # Versioned thresholds for the 48h telemetry-hole rule set
+        # (RULE_SET_VERSION). Defaults match the TRC design §6 operating
+        # baselines; tune from observed distributions after review cycles.
+        # Not hidden constants — override under kanban.telemetry_hole_rules.
+        "telemetry_hole_rules": {
+            "protocol_violation_repeat_threshold": 2,
+            "retry_thrash_failure_threshold": 2,
+            "blocked_aged_medium_seconds": 12 * 60 * 60,
+            "blocked_aged_high_seconds": 24 * 60 * 60,
+            "blocked_aged_critical_seconds": 48 * 60 * 60,
+            # When unset-or-null, falls back to kanban.dispatch_interval_seconds.
+            "dispatch_tick_seconds": None,
+            # When unset-or-null, defaults to 2 * dispatch_tick_seconds.
+            "todo_promotable_threshold_seconds": None,
+            "ready_unclaimed_threshold_seconds": None,
+        },
     },
 
     # execute_code settings — controls the tool used for programmatic tool calls.