{"item":{"id":"122eafc918248c5d98da08c4","product":"hermes","language":"zh","title":"Hermes 权限边界：命令审批不等于系统隔离","summary":"官方安全文档说明危险命令审批、拒绝规则与超时行为，也明确指出命令匹配不是完整的操作系统沙箱。对实际隔离仍需要结合系统权限、受限挂载和凭据范围，不能只依赖一条 deny 规则。","contentType":"guide","category":"security","revision":1,"canonicalUrl":"https://botclaw.tech/items/122eafc918248c5d98da08c4?lang=zh","sourceUrls":["https://hermes-agent.nousresearch.com/docs/user-guide/security"],"sourcePublishedAt":null,"reviewedAt":"2026-10-01T00:00:00.000Z","collectedAt":"2026-10-01T07:20:22.629Z","updatedAt":"2026-10-01T07:20:22.629Z","source":{"id":"hermes-docs","name":"Hermes 官方文档","origin":"official"},"summaryMethod":"editor","applicability":{"version":null,"platforms":[],"requirements":[]},"verification":{"kind":"official_documentation","checkedAt":"2026-10-01T00:00:00.000Z","urls":["https://hermes-agent.nousresearch.com/docs/user-guide/security"],"limitations":["本站未对这条资料中的产品行为进行独立运行验证。"]},"body":null,"indexable":false,"supersededBy":null,"review":{"state":"current","pendingChanges":0,"policyDays":7}}}