Settings

agentsfence settings
agentsfence settings --compiler inherit
agentsfence settings --model MODEL --provider PROVIDER
agentsfence settings --compile-budget 45
agentsfence settings --profile work --strict-yolo --audit-retention-days 30

Inherit follows the profile’s configured default model. A per-chat -m or mid-chat model switch does not change the compiler. Dedicated uses the model you choose, with Hermes credentials and routing. An unset or unroutable default falls back safely; set a default or dedicated compiler.

Shared settings are stored once at ~/.hermes/agentsfence/settings.yaml. Per-profile overrides live at <profile>/agentsfence/config.yaml. Overrides take precedence; doctor shows effective values. The separate shared filename preserves legacy default-profile config files during migration. Hermes’ managed auxiliary route is synchronized automatically.

A premium compiler model is recommended because its reading of your request determines authority. A compile may retry once for invalid output within its total budget; omitted permissions do not trigger a retry. The supported maximum budget is 480 seconds; AgentsFence synchronizes plugins.hook_callback_timeout with the effective budget. A model change runs a probe and reports a slow compiler so you can choose a faster model or raise the budget.

In AgentsFence config, compiler.stages: 1 uses one response containing interpretation and intents. 2 separates these into two calls for evaluation comparisons. compiler.require_sensitive_approval defaults to true, requiring approval for financial and permission changes even when requested.

Hermes approval and cron behavior are configured in each profile’s config.yaml (approvals.mode and approvals.cron_mode). --strict-yolo converts questions that Hermes would automatically approve to BLOCK. Fallback questions always fail closed under bypass/cron approval.

Audit defaults: rotate at 10 MB, keep rotated files for 90 days. Configure audit.max_bytes, audit.retention_days, audit.enabled and redaction keys in AgentsFence settings. See Logs and audit.