chore(catalog): review disclosure for hermetic

plugin-catalog/hermetic.yaml

@@ -3,7 +3,7 @@ repo: https://github.com/forefy/hermetic
 sha: 7e9788b7155b4fc8b31f1ba7820a54e0b39ab94a
 version: "1.4.0"
 requires_hermes: ">=0.21.6"
-description: "Status-bar popover for Hermes Desktop with three views: Costs (spend, cache, pricing drift, OpenRouter provider routing), AAI (skill changes, ratings, tests and replays) and HDR (a guard for risky tool calls, hooks, destinations, sensitive paths, what runs on its own). Disclosure: reads this profile's sessions (and other profiles' when you pick them) to audit tool calls, paths and hosts; can edit and save config.yaml and rewrite skill files when you ship or revert a version, and once you give background tasks your routing rules, rewrites those tasks' entries in config.yaml by itself when the main provider changes; AAI replays and judge runs resend conversation context and tool definitions to OpenRouter with your OpenRouter key and incur cost; HDR lists listening TCP ports via ps/lsof; HDR's guard (off by default) checks each tool call through a pre_tool_call hook and, when you turn it on, holds calls Hermes does not check itself (reading keys and logins, writing startup items or key places Hermes does not list) and asks you in its own card, blocking without an answer in time (6 seconds inside Hermes' plugin hook limit, 24 seconds by default), or blocks them outright; HDR also lists shell and gateway hooks and flags hook scripts edited after approval, keeping a copy of each script to compare; Costs reads public model price lists (OpenRouter, and hopscotchlabs.ai model pages for models a profile is billed for through Hopscotch) and, at most once a minute, asks Hermes for the profile provider's account report (OpenRouter usage and limits, Anthropic and OpenAI Codex plan windows, Nous credits and spend cap), with Hermes looking up the credential, and reads OpenRouter workspace and guardrail budgets itself with the profile's OpenRouter key, sent only to OpenRouter."
+description: "Status-bar popover for Hermes Desktop with three views: Costs (spend, cache, pricing drift, OpenRouter provider routing), AAI (skill changes, ratings, tests and replays) and HDR (a guard for risky tool calls, hooks, destinations, sensitive paths, what runs on its own). Disclosure — reads this profile's sessions (and other profiles' when you pick them) to audit tool calls, paths and hosts; can edit and save config.yaml and rewrite skill files when you ship or revert a version, and once you give background tasks your routing rules, rewrites those tasks' entries in config.yaml by itself (from a background thread, at most once a minute) when the main provider changes; adds your data_collection and zdr routing rules to requests sent to Nous Portal; AAI replays and judge runs resend conversation context and tool definitions to OpenRouter with your OpenRouter key and incur cost (Nous Portal profiles are refused); HDR lists listening TCP ports via ps/lsof; HDR's guard (off by default) checks each tool call through a pre_tool_call hook and, when you turn it on, holds calls Hermes does not check itself (reading keys and logins, writing startup items or key places Hermes does not list) and asks you in its own card, blocking without an answer in time (6 seconds inside Hermes' plugin hook limit: 24 seconds by default, 120 seconds when that limit is off) or at once when hermetic is not open, or blocks them outright; the guard is a best-effort match on the paths a call names, not a sandbox; questions from every profile wait in the default profile's hermetic folder; HDR also lists shell and gateway hooks and flags hook scripts edited after approval, keeping a copy of each script to compare; Costs reads public model price lists (OpenRouter, and hopscotchlabs.ai model pages for models a profile is billed for through Hopscotch) and, at most once a minute, asks Hermes for the profile provider's account report (OpenRouter usage and limits, Anthropic and OpenAI Codex plan windows, Nous credits and spend cap), with Hermes looking up the credential, and reads OpenRouter workspace and guardrail budgets itself with the profile's OpenRouter key, sent only to OpenRouter."
 maintainer: forefy
 tier: community
 category: desktop