Start with the document that owns the question you are trying to answer.
- README: product overview and fastest development path.
- Deployment: deployment configuration and operating steps.
- Hermes single outbound gateway: exclusive-workload explicit proxy, exact destination inventory and deployment verification.
- Workload gateway contract: ordinary client CONNECT, secretless forwarding and typed credential routes.
- Transparent gateway contract: capability references, typed hydration, streaming mediation, and routing.
- Approval broker operations: approval-broker integration and operational behavior.
- Vertical integration example: isolated end-to-end demonstration.
- Hermes Agent integration: fail-closed tool admission, receipts, and deployment.
- Hermes v2026.8.3 compatibility: exact Telegram inventory, classifications, runtime gates, and upgrade contract.
- Integration boundaries: system ownership and external integration boundaries.
- Threat model: security invariants, trust boundaries, and known risks.
- Persona and realm contract: current pre-1.0 identity context.
- Architecture decisions: decisions and their rationale.
- Machine-readable contracts: protocol schemas, OpenAPI documents, and canonicalization rules.
- Contributing: branch, review, attribution, release, and security-reporting policy.
- Repository conventions: commands, repository shape, documentation ownership, scratch space, and bootstrap choices.
- Exclusive gateway implementation review: reviewed boundaries, regression evidence and deployment limitations.
- Security audit: current audit evidence and residual risks.