# Hermes security: command approval is not OS isolation

The security guide explains approvals, deny rules and timeouts. Shell-command matching is not a complete OS sandbox: containment also requires suitable permissions, restricted mounts and scoped credentials. A single deny rule cannot guarantee that a capability is unreachable.

- Citation: https://botclaw.tech/items/122eafc918248c5d98da08c4
- Revision: 1
- Published: Unknown
- Reviewed: 2026-10-01T00:00:00.000Z
- Updated: 2026-10-01T07:20:22.629Z
- Review state: current; 0 pending source changes
- Applicable version: Not pinned; check current documentation



## Evidence and limits

- official_documentation
- Product behavior has not been independently tested by BotClaw for this record.

## Sources

- https://hermes-agent.nousresearch.com/docs/user-guide/security