{"timestamp":"2026-06-10T21:20:28.791171965+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"hermes --version && hermes gateway --help && hermes gateway setup --help","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"c44a60c2-b9ea-4ff3-be4c-bff3a88f06f9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:20:33.220760651+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway status","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8b8e180a-84c4-45bb-88eb-30b477d01eb8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:20:34.649536864+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"hermes config path && hermes config env-path && hermes config check","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"23e56b1a-8862-4801-9706-7d3647cc7b31","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:20:40.224269163+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport urllib.request\nurl='https://hermes-agent.nousresearch.co[...redacted 180 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"07cbd7db-9bce-4d80-a753-6713370db7f5","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:20:48.915961325+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport urllib.request, re, html\nurl='https://hermes-agent.nousr[...redacted 500 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"33914329-b33f-4e24-9c3f-bbf31f320be7","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:20:53.662088634+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport urllib.request, re, html\ns=urllib.request.urlopen('https[...redacted 240 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6cc47bd5-4d7b-4501-bdb0-2030d68018f2","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:26:03.646831475+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\nimport re\n\nenv_path = Path('/home/wild[...redacted 1307 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d269ed54-cc1c-4112-b962-13dd06d496ea","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:26:15.940163777+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nfrom pathlib import Path\n\nenv_path = Path('/home/wildlama/.herm[...redacted 604 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"6add52a7-a260-4e5d-9976-4fb87e95e3b8","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:26:21.224386140+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"hermes gateway install && hermes gateway start && sleep 5 && hermes gateway stat[...redacted 2 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"90659d03-2277-4dea-b21f-90f5f35d6569","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:26:24.172617835+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"printf 'Y\\n' | hermes gateway install && sleep 5 && hermes gateway status","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"43e47345-5b67-4431-9703-3366ba2f7402","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:26:28.653004550+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"yes Y | hermes gateway install; sleep 5; hermes gateway status","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"44cfdd31-432e-432f-80c0-849ecb398f3d","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:26:38.930804631+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"journalctl --user -u hermes-gateway --no-pager -n 80 | tail -80","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"ef7d44fc-98a8-48f0-b0b1-2df988ec8f43","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:26:41.757200384+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"sleep 3; tail -120 /home/wildlama/.hermes/logs/gateway.log 2>/dev/null || true; [...redacted 21 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"31c650eb-6952-421d-9fc8-fc548a41a86b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:28:38.812885407+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"set -e\nif command -v tailscale >/dev/null 2>&1; then\n  echo \"tailscale already i[...redacted 140 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"310e0393-e488-4228-8125-56ddc34a1021","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:28:42.574052374+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"curl -fsSL https://tailscale.com/install.sh | sh","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"edddaecf-7d78-4c5f-890f-946e66deb6f4","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-10T21:28:56.758953028+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"sudo -n true && echo 'sudo passwordless available' || echo 'sudo password requir[...redacted 3 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"8bc92efd-a1f8-40e7-a816-8c1caa41e15f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:32:27.624130354+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"set -e\nif command -v tailscale >/dev/null 2>&1; then\n  echo \"tailscale already i[...redacted 251 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"16bad3a5-279d-4056-9f1a-0afff7d28f8a","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-10T21:32:34.407215213+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"sudo -n true && echo OK || echo FAIL\nsudo -l -n 2>&1 | sed -n '1,80p'\nif [ -d /e[...redacted 87 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0f9a463b-59eb-40dc-a9ec-135d2a21a757","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:34:05.603188087+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Block","rule_ids":["curl_pipe_shell"],"command_redacted":"sudo -n true && echo 'sudo passwordless OK' || echo 'sudo still needs auth'\nif s[...redacted 377 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"739b5ef2-e648-4718-9058-16be7f0c17bf","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["curl_pipe_shell"]}
{"timestamp":"2026-06-10T21:34:17.440144194+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Block","rule_ids":["pipe_to_interpreter"],"command_redacted":"tailscale status --json 2>/dev/null | python3 - <<'PY'\nimport sys,json\ns=sys.std[...redacted 618 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0ce3aaa1-fb5c-4b49-b2f8-95d86a462c9f","tier_reached":3,"entry_type":"verdict","raw_action":"Block","raw_rule_ids":["pipe_to_interpreter"]}
{"timestamp":"2026-06-10T21:34:24.363370623+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"tailscale status; echo EXIT:$?","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"651ac4bf-4709-438c-acff-f2a39330367f","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:34:48.583830421+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"sudo -n tailscale up","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"0a4ad1ee-0d96-41a3-bcfc-ce3748df1fc9","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:36:41.380709316+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"sudo -n true >/dev/null 2>&1 && echo 'passwordless sudo is currently active' || [...redacted 81 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"24fa901f-6eca-410b-97ba-574c8d900366","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-10T21:38:08.976150177+00:00","session_id":"f7072777-9761-4864-8e93-a3254ff3e45a","action":"Allow","rule_ids":[],"command_redacted":"whoami; hostname; hostname -I 2>/dev/null || true; ip -4 addr show scope global [...redacted 30 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"97bbc905-a8d4-4bb3-a03d-8d163e8d1197","tier_reached":3,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T18:51:26.604633951+00:00","session_id":"e7120cf4-7dbd-4580-bd5f-64f90bb2697d","action":"Allow","rule_ids":[],"command_redacted":"hermes tools list 2>/dev/null | head -200","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"d614e5ef-ba8f-4fef-8134-306dc80e2895","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T18:51:28.220844287+00:00","session_id":"e7120cf4-7dbd-4580-bd5f-64f90bb2697d","action":"Allow","rule_ids":[],"command_redacted":"hermes config 2>/dev/null | head -200","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"21c6f9b0-6524-4dbd-bb27-93f27478dbcc","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T18:51:37.930339974+00:00","session_id":"e7120cf4-7dbd-4580-bd5f-64f90bb2697d","action":"Allow","rule_ids":[],"command_redacted":"python3 - <<'PY'\nimport yaml, pathlib\np=pathlib.Path.home()/'.hermes/config.yaml[...redacted 214 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"5a00d4c5-0b5d-49eb-9e9a-225079384606","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T18:51:46.229732095+00:00","session_id":"e7120cf4-7dbd-4580-bd5f-64f90bb2697d","action":"Allow","rule_ids":[],"command_redacted":"hermes config set approvals.mode off && hermes config set terminal.cwd /home/wil[...redacted 98 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"f44cdd04-6fc3-48c0-a98d-2c180b9c462b","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}
{"timestamp":"2026-06-11T18:52:37.251044953+00:00","session_id":"e7120cf4-7dbd-4580-bd5f-64f90bb2697d","action":"Allow","rule_ids":[],"command_redacted":"hermes config set approvals.mode false && python3 - <<'PY'\nimport yaml, pathlib\n[...redacted 406 bytes]","bypass_requested":false,"bypass_honored":false,"interactive":false,"policy_path":null,"event_id":"933c99b3-1105-4cfe-b78b-70218c48f483","tier_reached":1,"entry_type":"verdict","raw_action":"Allow","raw_rule_ids":[]}