Optional AI setup
Use Hermes or DIAL deliberately.
Safety ruleKeep real user data local. Do not
publish private vault content, secrets, screenshots, or logs.
How to use this
Hermes is the preferred local integration and DIAL is the optional alternate runtime. AI output is suggestion data and should not be treated as an automatic write authority.
What remains explicit
Capture, AI, review, import, and agent suggestions require user
approval before durable writes. Configuration should point at
_WorkOS, and reference vaults should remain read-only
unless deliberately reconfigured.