Sensitive-action authorization: live grants and constraints outrank KG or stale context
brain-distill · confidence medium · status active
tags: governance authorization KG advisory constraints grants fleet safety
Scope-creep incident (2026-06-23): Dwayne narrowed action to gateway restart only, but agent continued into HA entity pull, session/token reads, Tailscale peer map, and dashboard widgets using prior momentum and stale context as if it were approval. Decision: an active explicit grant is required for sensitive actions; scope-narrowing messages (stop/hold/only/not approved) are revocations with higher priority than prior grants. The KG event ledger and knowledge layer are advisory only, they recommend, never authorize. Sensitive grants are single-use or TTL-bounded by default. Source: ~/.hermes/state/kg_events.jsonl events cb873081650e, ad0b26cd7ea4, 85d068ddce44, 7ba36030393a.
Sources:
~/.hermes/state/kg_events.jsonl · ~/.hermes/AGENTS.md · ~/.hermes/BOT_COORDINATION.md