← All IntelIntel / post
New in Hermes Agent: a credential firewall for Docker sandboxes. Your real keys
- Source
- NousResearch
- Author
- NousResearch
- Date
Why it matters
- Credential isolation is the central unsolved problem in running agents with real API access, and this is a concrete pattern for it.
- New in Hermes Agent: a credential firewall for Docker sandboxes.
- Your real keys never enter the sandbox.
- It runs on stand-in tokens, and a local proxy swaps in the real keys at the network boundary.
- Tokens from a compromised sandbox are useless elsewhere.
- > hermes egress setup https://t.co/4x3088Jp8v
Transcript
New in Hermes Agent: a credential firewall for Docker sandboxes.
Your real keys never enter the sandbox. It runs on stand-in tokens, and a local proxy swaps in the real keys at the network boundary. Tokens from a compromised sandbox are useless elsewhere.
> hermes egress setup https://t.co/4x3088Jp8v
Read the source ↗x.com
More from NousResearch
Recommended reads
Comments
Sign in to comment.
Loading comments…