Hermes Desktop

Open the Fence pane to see the selected session’s policy, verdicts and audit events. Hermes’ native approval dialog handles ASK_USER: approve once or for the session grants the exact action; denial or timeout grants nothing. BLOCK never runs and cannot be overridden by approval.

The profile list has Protect / Unprotect toggles, a Protect new profiles switch, effective compiler/budget settings and a Test profile button. Explicitly unprotected profiles remain excluded from auto-protection. New-profile protection applies on a sweep; opening a new CLI profile before a sweep can leave its first session unprotected.

Settings and protection use the same transactions and capability checks as the CLI. Restart existing backends when the pane or doctor says their loaded configuration is stale. Protection and compiler health are separate: read-only fallback remains enforced even when the compiler fails.

Tests use mock tools and fresh compile sessions, with paid model confirmation when needed. Test results distinguish requested authorization, injection containment and fallback. See Test a profile and Logs and audit.