# Worked example: a Hermes deployment that reads a repository, proposes changes,
# and is not trusted to push them. Copy to 01-authority/<deployment>.yml.
#
# Note the shape rather than the paths. may_write is one directory inside
# may_read; the push tool is reachable but cannot be completed without a human;
# egress is denied outright because this deployment has no reason to leave the
# machine. Each of those is a decision, not a default.
deployment: docs-assistant
owner: platform-team
reviewed: 2026-08-08

filesystem:
  may_read:
    - ./docs
    - ./README.md
  may_write:
    - ./docs/drafts
  never:
    - ~/.ssh
    - ~/.config/hermes/credentials
    - ./secrets

network:
  egress: deny
  allowlist: []

credentials:
  scope: task
  justification: ""

tools:
  enabled:
    - filesystem.read
    - filesystem.write
  requires_human:
    - vcs.push

data:
  may_process:
    - public documentation
  never_process:
    - customer data
    - credentials

escalation:
  on_boundary_hit: halt