hermetic documentation

hermetic manages a fleet of Hermes agents on AWS from a macOS desktop app and a CLI that share one core.

Each agent is an EC2 instance with no inbound network rules. You reach it over Tailscale and nothing else. The instance can be replaced at any time; the EBS data volume where the agent keeps what it has learned outlives it.

hermetic is pre-alpha.

Start here

• Install the desktop app and the hermetic CLI.
• Create your first fleet: the AWS and Tailscale setup, hermetic init, and a first agent.

Understand it

• Principles behind the design.
• Security model: what is sealed, what is shared, and the trade-offs that are accepted today.
• What a fleet costs to run, and the choices that move the bill.
• The explainer animates the same ground in five paths, from the big picture to standing up a fleet.

Run it

• The operations runbook covers a real fleet from init to teardown.
• The CLI reference and exit codes are generated from the CLI itself.

The authoritative specification is docs/design.md in the repository. Where this site and the spec disagree, the spec is right.