EchoNet.ing
PHASE B / CAPABILITY ATLAS

Hermes Runtime

How intent becomes bounded, verified action without making the runtime the owner of knowledge.

Profileisolated configuration
Contextminimum approved sources
Modelreasoning engine
Skilltask procedure
Toolbounded action
Evidenceacceptance proof
OPERATING MODEL

Hermes Runtime

Hermes coordinates a loop: it loads one isolated profile, assembles approved context, asks a replaceable model to reason, follows the relevant skill, invokes only allowed tools, and verifies the result. Sessions preserve conversation continuity; compression preserves important decisions near context limits; checkpoints support rollback after file changes.

Choose a profile

Separate configuration, memory, sessions, and skills by role or trust boundary.

Load minimum context

Start with identity, privacy, and one task map instead of scanning everything.

Select a procedure

Load the skill whose trigger matches the task before choosing commands.

Execute narrowly

Use the smallest tool surface and explicit target needed for the operation.

Verify and classify

Read back the result, report evidence, then route durable knowledge to the correct layer.

PRACTICAL REFERENCE

Runtime responsibilities

LayerOwnsMust not become
ProfileConfiguration and isolationA shared secret dump
SessionConversation continuityCanonical project truth
CompressionPreserved decisions and constraintsAn invented summary
CheckpointRecoverable file stateProof the application works
MemoryCompact stable factsTask-progress storage
FAILURE MODES

What breaks—and how to recover.

Context drift

Reload canonical maps and cite the selected sources.

Tool loop without proof

Require read-back, runtime smoke, or user-facing evidence.

Cross-profile leakage

Keep profile homes isolated and never write across them without explicit approval.

Copyable implementation prompt

Design a Hermes runtime for [WORKFLOW]. Define profile isolation, startup context, model policy, required skill, allowed tools, session handling, compression rules, checkpoints, approvals, evidence, and durable capture. Use placeholders and verify every state-changing step.
Public boundary

Use placeholders for paths, accounts, endpoints, identities, and credentials. Never publish secret values, private records, or a live control surface.

Verification gate

  • Profile boundary is explicit
  • Context sources are named and minimal
  • Tool permissions match the task
  • A rollback path exists
  • Completion requires direct evidence