hermes-deploy

原文涵盖的主题

• Hermes Deploy
• Freshness check
• Owner rule
• The pipeline
• Critical rules
• Forbidden
• Sources

Take an owner from "here is how my company works, here is the server" to a verified Hermes Agent install without the owner running a single command or writing a single line of YAML. The agent reads the document, derives the profile (an internal artifact), discovers the server read-only, prepares a complete dry run with a diff, asks for ONE go, then backs up, applies, verifies and keeps the rollback ready. Before writing or changing any Hermes config, run hermes --version and hermes update --check, then read https://github.com/NousResearch/hermes-agent/releases/latest. If the installed or latest version is newer than 0.23.0, read every release note since 0.23.0 ("Upgrade notes" first) and adjust. Never apply guidance from this skill to a newer version without that check. Here both commands run on the target server over SSH (Phase A); the local machine usually has no hermes binary. The owner never runs a command or writes a profile; the agent does it end to end. The owner gives a document and a server, answers at most one grouped question, and says "go" once. | # | Phase | Writes | Reference | |---|-------|--------|-----------| | 1 | Read the document, extract facts | nothing | doc-t

这里只展示节选，请以完整原文和当前要求为准。