# Hermes Skill release gate

One gate applies to one exact Skill content hash. Never record credentials.

## Artifact identity

- Skill name / version:
- Source identifier and maintainer:
- License:
- Reviewed SHA-256:
- Bundle file manifest:
- Hermes scanner verdict / version / fresh-or-cached:
- Tier 1 status and findings:
- Reviewer / date / next review:

## Permission contract

- Profiles and project roots:
- Read roots:
- Write roots and overwrite behavior:
- External domains / recipients / transmitted fields:
- Toolsets and individual tools:
- Required environment variable names; no values:
- Dependencies and pinned versions:
- Logs, retention, and redaction:
- Human approval actions:

## Fixed evidence

- Functional regression result:
- Prompt-injection fixture result and tool trace:
- `SECRET-CANARY-742` result:
- Unauthorized output-path result:
- Missing dependency / credential result:
- Timeout / network failure result:
- Rollback or compensation result:

## Decision per surface

| Surface | Decision | Identity / Profile | Input limits | Tool limits | Approval | Logs | Stop path |
|---|---|---|---|---|---|---|---|
| Manual CLI | 未验证 | | | | | | |
| Team shared | 未验证 | | | | | | |
| Gateway | 未验证 | | | | | | |
| Cron | 未验证 | | | | | | |
| API / ACP | 未验证 | | | | | | |

Allowed decisions: `approve`, `restricted`, or `reject`.

## Update and revocation

- Upstream check owner and frequency:
- Local modifications and diff archive:
- New-hash re-review trigger:
- Callers disabled:
- Cron paused/removed:
- Skill uninstalled and index reloaded:
- Residual process check:
- External side effects requiring separate reversal: