It textsyou first.
An always-on agent in one WhatsApp thread. It briefs, watches, nudges, and files — you open nothing.
You werethe cron job.
Assistants wait to be asked. Dashboards wait to be opened. Loops wait for you.
Assistants wait
Apps demand visits
Loops stay open
One ordinaryTuesday.
Played back the way it actually happens — in the chat.
Over one day Hermes sends 9 WhatsApp messages — a dashboard check, a morning brief, nutrition nudges, a quiet-day heartbeat — and receives 4 back: a closed loop, a hard question, a gym log, a reminder. One check runs and sends nothing. Apps opened: zero.
Ambient meansit goes both ways.
Crons wake it for you. Routers catch what you throw back. One thread carries it all.
Reliability livesin code.
Five gates in plain code run before any model does. Send it something.
Make it reliable in code first. Then make the model cheap.
send a message… the routers will narrate themselves here.
the reply, the filed note, or the closed loop lands here.
When it needsto actually think.
A matched message wakes a Claude Code worker. Tap through its lane.
Capture
You message your own number on WhatsApp — text, a voice note, a photo of a whiteboard. No app to open, no folder to choose. The same thread carries Hermes' own pings back to you.
No app, no folders. If you can send a text, you can reach it — and it can reach you.
Locked downby allowlist.
Thirteen tools, enumerated. Everything else doesn't exist.
Allowlist, not blocklist
30 default tools cut to 13 — exactly its job.
A hook before every tool call
stray vault writes and code escapes blocked, in code.
An audit trail
every worker run logged — what ran, what it touched.
Confirmation gates
anything destructive waits for a yes.
You secure an agent by enumerating what it may do.
The whole thing runson pocket change.
Code does the predictable work. The expensive model wakes only when it earns its keep.
the trick isn't a bigger model — it's routing every job to the cheapest tool that clears the bar.
What it buys
Nothing to open
It lives in a chat you already have.
Loops close themselves
Replying to the brief writes the vault.
It compounds
Everything lands in one plain-text vault.
It shipped pastits own roadmap.
The first version of this page made promises. They shipped.
It talks back
Ask anything — answered from your own notes.
It's proactive
Four crons ping you before you ask.
More senses
Calendar, email, voice — same thread.
A weekly retro agent
It reviews its week and proposes new crons.