NousResearch/hermes-agent
A local agent framework whose approvals, worker threads, undo paths, terminal UI, telemetry, and computer-use tools expose the cost of turning broad capability into governable work.
Developers and operators running a local general-purpose agent.
terminal agent / tools and plugins / delegated workers
Approval state follows the worker thread
Thread-local approval state narrows the risk that consent for one task becomes ambient authority for another.
Reporting is still in progress.
This scope profile names the project's place in the field and one useful mechanism. It does not claim that every runtime boundary has been inspected.
Learn Through This Project
8 lessonsLatest Reporting
8 articlesOctober 12, 2026 — A new snapshot shows reviewers the system prompt and tool definitions produced by the code. Nine controlled configurations turn changes in the agent’s instructions into something maintainers can compare directly. NousResearch/hermes-agent
OpenClaw Had Stopped the Child. Restart Brought Back the Parent.September 20, 2026 — A waiting conversation could survive its own cancellation in OpenClaw’s recovery records. A new repair saves the parent’s stopped state before answering the user—and protects a newer turn from that delayed write. openclaw/openclaw, NousResearch/hermes-agent
A Child Agent Can't Promise Its Watcher to the ParentSeptember 8, 2026 — Hermes now makes a child wait, kill, or formally hand over background work before it returns—ending one treacherous kind of progress report. NousResearch/hermes-agent
Hermes Decides That a Preference Can Have a HomeSeptember 4, 2026 — Hermes is redrawing a deceptively important line: a correction learned while doing one task belongs with that task's skill, while persistent memory is for facts that should matter everywhere. NousResearch/hermes-agent
Builder Work: Hermes Keeps an SDK Upgrade From Dropping the ConversationAugust 18, 2026 — A public Claude-assisted MCP migration in Hermes Agent shows the durable craft: make a compatibility seam explicit, then test every way an upgrade can lose meaning without crashing. NousResearch/hermes-agent
A Session Approval Needs Something to Hold On ToAugust 13, 2026 — Two fresh code changes make the same point: a human’s “yes” is only useful when an agent can name exactly what that yes still authorizes. NousResearch/hermes-agent, github/copilot
Hermes now stops agents from quietly rewriting their own instructionsAugust 8, 2026 — A new Hermes Agent write gate treats project instruction files as a persistence surface: even an auto-approved agent must ask a human before it changes the text that can steer tomorrow’s work. NousResearch/hermes-agent
QM is trying to turn the personal agent into company infrastructureAugust 1, 2026 — Y Combinator's new open-source harness does not win its case by running Codex or Claude in Slack. Its more consequential bet is that every person and room needs a clearly owned memory, workspace, permission set, schedule, and durable computer. yc-software/qm, block/buzz, egregore-labs/egregore, openclaw/openclaw, NousResearch/hermes-agent, crewAIInc/crewAI, microsoft/agent-framework
Primary Sources
Open Questions
- Can a delegated worker prove the exact authority, result, and live status it inherited?
Evidence state describes what this Atlas profile can support today. It is not a product score and it is not evidence that uninspected capabilities are absent.