NexusThe conversational layer
Chooses a bounded identity and adds deterministic privacy, risk and capability signals to the current turn. Two stock hooks; no tool grants. Labels advise the active model—they do not enforce policy.
Governed intelligence around Hermes Agent
Intelligence,
with a sense
of proportion.
A consistent voice. Context that matters. Clear limits on what an assistant can do.
Nexus adds a considered layer to Hermes—not another source of authority.
Advisory by design. The human stays in control.
System anatomy01 / 03
One conversation.
Distinct responsibilities.
Your intentThe goal, the context, the right to stop.
The advisory layer
Nexus shapes how a turn is presented and labels request signals. It does not select providers, grant tools or approve actions.
Conceptual map, not a product screenshot.Read the layers ↓
01 / The architecture
Context is useful.
Authority is different.
A personality, a reasoning model and an execution system are not interchangeable. Nexus keeps those responsibilities legible.
Hermes AgentThe host and execution layer
Owns authentication, model and provider selection, tools, approvals, streaming and session storage. Nexus cannot promote a suggestion into permission or replace the host’s controls.
The wider Nyx systemSeparate automation and supervision
Houses collectors, bounded proactive routines, answer critique and the overlay guardian. These are separate components of an installation—not hidden abilities granted by selecting an identity.
A voice is not a model. A model is not an authorization.The distinction is the design.
02 / A consistent presence
Change the voice.
Keep the boundaries.
Automatic selection adapts the identity to each request, with Nyx as the fallback. A conversation can also pin a particular identity. Either way, its role and style are presentation—not a separate agent, a model switch or a security exception.
An identity is a way of working
More deliberate when the stakes are high.
More concise when the answer is simple.
/identitySee the available identities./identity hexPin Hex’s presentation in this conversation./identity autoReturn to automatic per-turn selection.Commands are for a Hermes installation with Nexus enabled. Selecting Hex here is not the separate private /hex lane.
03 / The next intelligence layer
Beyond an answer.
Toward a
verified outcome.
The v3.1.1 candidate explores a fuller loop: maintain the goal, bind a plan to current evidence, prepare the next step, and use explicit feedback to correct course.
Not activated in production
This is a separate intelligence candidate, not the version of the running Nexus plugin. A recorded 63-test pass covers candidate behavior; it does not prove end-to-end production execution.
Keep the goal
Maintain durable task state, rather than relying on a chat summary.
Check the evidence
Bind decisions to scoped sources and their current revisions.
Choose the next step
Compile an advisory plan and recheck which steps are ready.
Prepare, don’t presume
Preparation is useful progress. It is not a completed goal.
Act with authority Integration gated
Real executors and authenticated approval paths remain separate work.
Verify the outcome Integration gated
Require trusted completion evidence—not a model’s assertion of success.
Learn from correction
Persist explicit feedback; reopen work or cancel stale preparation when sources change.
04 / Boundaries that mean something
“Private” must be
more than a label.
Local-first is an architectural preference, not a blanket guarantee. The actual destination, fallback behavior and data handling have to be enforced and verified by the host.
- Signals are not a firewall.
- Nexus can identify privacy-related patterns. That classification does not prevent the current message from reaching the selected model. Routing and privacy protection belong outside the identity layer.
- Initiative is not permission.
- Noticing a useful next step does not authorize a purchase, deployment or message. Consequential actions need the applicable host approval or an explicitly bounded prior grant.
- Learning is not policy drift.
- Feedback can improve a proposal. It cannot grant new capabilities, expand an approved scope or quietly weaken a safety boundary.
And when the overlay needs repair?
The separate guardian supports evidence-led recovery and hash-pinned promotion under explicit operator controls. Approved maintenance may be automated; uncertain attribution is not permission to improvise a repair.
05 / The evidence, and its limits
No borrowed certainty.
Evidence checked .
A static snapshot of the inspected installation—not a live status feed.
Nexus plugin · 2.3.3
Advisory request context and identity selection through two stock Hermes hooks.
The runtime receipt matches the inspected gateway generation. This establishes the observed plugin load, not a certification of every host security control.
Answer critique
Owned by the separate nyx-critique component, not by Nexus’s two hooks.
Out-of-band review is not a quarantine for a streamed answer. Its presence should not be read as a guarantee that every answer is checked or blocked before delivery.
Intelligence · v3.1.1
Recorded verification: 63 tests, zero failures, errors or skips. All 34 bound files matched at this content refresh.
Not activated in production. The unit suite did not exercise model inference. The independent feedback-fix review produced no verdict; first-hand checks are not an independent sign-off.
Versions describe different components. Plugin 2.3.3 and intelligence candidate v3.1.1 are not successive deployments of the same running module. These records are not a general reliability, security or privacy certification.
A few useful
distinctions.
Is Nexus a model or an autonomous agent?
Neither. Nexus is an advisory plugin around Hermes Agent. Identities shape presentation; Hermes supplies the active model and execution environment. The wider system includes separate automation components with their own controls.
Does the candidate already finish real-world tasks?
The candidate demonstrates planning and state-management behavior. A separate synthetic model probe exercised an advisory planning lifecycle, not a completed real-world goal. Production executors, authenticated recipients, approvals and outcome verification are still integration work.
Why not show live operational counters?
A public architecture page should not expose private operational data or present aging counters as current health. This page uses a dated, reduced evidence snapshot and makes no requests to private backends.
Can I open this page offline?
Yes. The design, diagram and interactions are contained in this HTML file. There are no remote fonts, analytics or runtime dependencies. External documentation links only connect when you choose to follow them.