Apply gated Hermes config patch
hermes_config_patch_applyApply a config file patch only after passing all safety checks, including expected SHA-256, parse validation, and confirmation nonce; writes a backup and receipt.
Instructions
Apply an exact-scope config-file patch only when mutation policy, allow_config_write, expected sha256, parse validation, and confirmation nonce gates all pass; writes a private backup and receipt artifact.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| home | No | ||
| reason | Yes | ||
| profile | No | ||
| new_string | Yes | ||
| old_string | Yes | ||
| config_path | Yes | ||
| replace_all | No | ||
| toolkit_root | No | ||
| confirmation_nonce | Yes | ||
| expected_original_sha256 | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ok | Yes | ||
| data | No | ||
| scope | No | ||
| run_id | No | ||
| status | Yes | ||
| message | No | ||
| verdict | No | unknown | |
| evidence | No | ||
| mutation | No | ||
| warnings | No | ||
| live_call | No | ||
| retryable | No | ||
| error_code | No | ||
| duration_ms | No | ||
| http_status | No | ||
| policy_tier | No | read_only | |
| artifact_dir | No | ||
| likely_cause | No | ||
| next_actions | No | ||
| safe_next_action | No | ||
| redactions_applied | No |