Provenance Gate
Flags memory and skill_manage writes that state a user decision ("the user decided ...", "用户决定 ...") without the user's own words: each such sentence needs a quote that appears verbatim in text the user typed in this session, shares key words with the decision and does not drop a negation. A patch is checked by the text it produces. Observe mode (the default) records flagged writes and `hermes provenance-gate report` lists them; block mode refuses them and tells the model how to fix the write. Measured on an independent blind set of 133 lines: precision 1.000, recall 0.694.
Good to know before installing
Two hooks (pre_llm_call, pre_tool_call); keeps a local copy of the text the user types, with its sender_id and session link, and an evidence log of checked claims under plugin-data/provenance-gate (30-day default retention, `hermes provenance-gate purge`); reads MEMORY.md, USER.md and skill files to reproduce what a patch produces; no network, no credentials, never asks for approval.
From the plugin's catalog listing.
How to install
- Install it. Hermes asks for any API keys it needs, then asks whether to turn it on.
hermes plugins install provenance-gate - Said no? Turn it on later:
hermes plugins enable provenance-gate - Restart Hermes so it loads the plugin.
Some plugins also need a sign-in or settings: see Full setup & settings. Memory plugins ask whether to become your memory provider instead. Steps follow the official plugins guide (opens in a new tab).
- Category
- Memory & notes
- Maintained by
- simin-yuan (Community)
- Needs
- No API keys declared
- Needs Hermes
- 0.22.2 or newer
- Version
- 0.1.3
- In the catalog
- 2026-10-20, updated 2026-10-25
- GitHub stars
- 2
Full setup & settings ↗Source code ↗
More in memory & notes
New Hermes Agent updates every day on X. Follow @HermesWatcher