Unlock-Hermes

What Unlock-Hermes does

The README, written in Indonesian, says the tool turns off all Hermes Agent guardrails and works on Windows, Ubuntu and Debian, Fedora and RHEL, Arch, macOS on Intel and Apple Silicon, WSL and headless VPS setups. It works in two layers. The config layer sets approvals, security, gateway and tool-loop guardrail keys with hermes config set. The source layer patches about 33 functions under agent/ and tools/ that never read the config, making a backup, compile-checking and verifying each change.

The patcher detects HERMES_HOME, the package root, the virtualenv interpreter and the module that defines each function, and handles both the split layout used since v0.21 and the older single-file layout. Flags include --dry-run, --status, --restore to bring back backed-up files, --clean, --soul to install a bundled persona file as SOUL.md, and --no-restart. It needs Python 3.8 or newer and write access to the Hermes install folder, with no extra packages.

Key features

• Two-layer patching: config keys and about 33 source functions
• Backup, compile check and verification for each patched file
• --dry-run, --status and --restore flags
• Launchers for Windows (unlock.bat) and Linux, macOS and WSL (unlock.sh)
• Optional --soul flag that installs a bundled persona as SOUL.md
• Detects HERMES_HOME and both split and single-file Hermes layouts

When to use it

• Removing approval prompts in a throwaway or test Hermes environment
• Checking which guardrails are currently active with --status
• Restoring the original Hermes files after an experiment

Who it is for: Experienced Hermes Agent users who knowingly want to remove its safety guardrails.

How it fits with Hermes Agent

Built only for Hermes Agent, modifying its config and installed source files.

Requirements: Python 3.8+, an installed Hermes Agent, and write permission to its install folder

Note: It removes Hermes safety guardrails by editing installed source files in place, and the repository has no license file.

FAQ