Hermes Autonomous Action Approval & Security Gate

Hermes Autonomous Action Approval & Security Gate A lifecycle diagram generated by Archify. 01 / Action Execution Rail 02 / Staff Approval Hold + Rollback & Compensation 03 / Terminal Security Action Proposed · Hermes agent intent · Action Execution Rail · intent 01 Action Proposed Hermes agent intent intent Context Inspect · CRM & memory query · Action Execution Rail · context 02 Context Inspect CRM & memory query context Security Gate · scope & risk tier · Action Execution Rail · risk scoring 03 Security Gate scope & risk tier risk scoring Auto Dispatch · low risk (score <=4) · Action Execution Rail · low risk 04 Auto Dispatch low risk (score <=4) low risk Action Settled · state finalized · Action Execution Rail · executed 05 Action Settled state finalized executed Sovereign Block · firm scope violation · Terminal Security · firm boundary Sovereign Block firm scope violation firm boundary Staff Nonce Gate · WhatsApp / Flutter · Staff Approval Hold · HMAC nonce Staff Nonce Gate WhatsApp / Flutter HMAC nonce Action Denied · rejected or expired · Terminal Security · denied Action Denied rejected or expired denied Action Reversal · compensating tx · Rollback & Compensation · undo window Action Reversal compensating tx undo window Rollback Complete · state restored · Terminal Security · undone Rollback Complete state restored undone Legend start active state waiting decision terminal success failure / exit

Autonomous Execution Promotion Rail

  • • Actions automatically advance through 5 verified execution stages
  • • Low-risk actions (<=4) auto-dispatch instantly under strict rate limits
  • • Every execution logs irreversible cryptographic record to PostgreSQL audit table

Cryptographic Nonce Approval Gate

  • • High-risk actions (>=5: price cuts, contract generation, contact deletion) require human approval
  • • Dispatches single-use HMAC nonce token with 5-minute TTL to broker WhatsApp and Flutter CRM
  • • Action remains in quarantined hold; auto-expires if broker does not confirm

Firm Boundaries & Reversibility

  • • System 1 reflexively blocks sovereign government / Ministry of Justice courtroom actions per AGENTS.md
  • • Compensating transactions allow 15-minute undo window for safe state restoration
  • • All rollback events append to audit history to guarantee full regulatory traceability
Suite ↗