# Mandate

> Learned least-privilege for unattended Hermes jobs.

- [Overview](https://mandate-db2d83af-26675499.mintlify.app/index.md): Learned least-privilege for unattended Hermes jobs. A per-job policy, compiled from observed runs, enforced in the tool loop after a human approves it.
- [Quickstart](https://mandate-db2d83af-26675499.mintlify.app/quickstart.md): Install Mandate, observe a Hermes cron job, propose a policy, approve it, and enforce it.
- [Concepts](https://mandate-db2d83af-26675499.mintlify.app/concepts.md): Mandate format, evidence counts, the Leash Line, the drift inbox, widen and undo, and fail-closed enforcement.
- [CLI and slash commands](https://mandate-db2d83af-26675499.mintlify.app/cli.md): Every hermes mandate subcommand, the /mandate slash command, and the mandate_status tool, generated from the plugin source.
- [Configuration](https://mandate-db2d83af-26675499.mintlify.app/configuration.md): Plugin settings, the SQLite store, the Desktop page, and environment overrides.
- [Proof](https://mandate-db2d83af-26675499.mintlify.app/proof.md): How to rerun make prove, the CI matrix on Hermes v0.23.0 and v0.23.1, and the numbers from the last proof pack.
- [Security model and limits](https://mandate-db2d83af-26675499.mintlify.app/security.md): What Mandate enforces, how it decides, the threat model, and the known limits, stated honestly.
- [FAQ](https://mandate-db2d83af-26675499.mintlify.app/faq.md): Short answers about scope, rivals, approvals, data, and proof.
- [Built on Hermes](https://mandate-db2d83af-26675499.mintlify.app/nous.md): Mandate is a plugin for Hermes Agent by Nous Research, built for the Hermes Agent Plugin Hackathon.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.