Hermes-agent enables smart approvals by default and adds user-defined deny rules
TL;DR
Hermes-agent now defaults to smart LLM approvals for flagged commands and evaluates each independently. It adds user-defined deny rules that block commands even in yolo mode with explanatory feedback via /deny.
What changed
Smart LLM approvals are now the default for flagged commands in hermes-agent, assessing each one independently. User-defined deny rules block commands even in yolo mode. Explanatory feedback comes through the /deny command for Vibe Builders, Basic Users, and Developers.
Why it matters
This setup helps Basic Users avoid unintended command execution in daily tasks. Vibe Builders can enforce custom blocks tailored to their projects. Developers gain reliability in use cases like automated scripting compared to the AI tool that lacks independent assessments.
What to watch for
Compare the new defaults against manual approval modes in similar tools. Verify by running a flagged command then calling /deny to confirm the explanatory output.
Who this matters for
- Vibe Builders: Set custom deny rules in hermes-agent to block destructive commands even during fast yolo runs.
Harsh’s take
Default smart approvals solve a persistent problem in agentic workflows: context-blind command execution. By evaluating flagged actions independently rather than relying on blanket session permissions, hermes-agent reduces the friction of step-by-step prompts while maintaining baseline safety. Adding hard deny rules that override yolo mode is a practical safeguard for local execution. Teams running autonomous terminal scripts can now enforce strict boundaries on dangerous operations like forced deletions without sacrificing the speed of automated workflows.
by Harsh Desai
About Hermes Agent
View the full Hermes Agent page →All Hermes Agent updatesGo deeper
More from Hermes Agent
- FeatureHermes-agent reduces first-token latency by 80% across platforms
Hermes-agent cuts cold-start initialization from 4.3s to 0.9s across CLI, gateway, TUI, and desktop. Live reasoning streams by default with per-token response rendering.
- FeatureHermes-agent routes multi-channel messages across isolated profile configs
Hermes-agent now routes specific channels, threads, or guilds to dedicated profiles through a multiplexed gateway sharing one bot token. Each profile keeps isolated config, memory, skills, and secret scopes.