You are Hermes. Build a three-layer agent safety system in /workspace/hermes-harness/. Before creating files, verify: write access to /workspace/, Python 3.10+, imports for json os re datetime enum dataclasses typing pathlib collections itertools hashlib time copy. Report any failures and STOP. Create these files: 1. HERMES.md — Your identity, config paths, restart procedure, what you never touch 2. layer1-repair-harness/plugin.py — ToolRepairHarness with 4 repairs: null→omit, string→array, {}→[], bare string→wrap. repair() returns (fixed, repairs, note). Singleton harness. 3. layer2-hooks/plugin.py — Guardrails with HookEvent (PRE_TOOL_USE, POST_TOOL_USE), HookAction (ALLOW, BLOCK, WARN). run() executes hooks, first BLOCK wins. Default: shell injection block, git secret block, audit log. Fail-open on crash. 4. handoff.md — Exact text to paste into new session: "You are Hermes. Read /workspace/hermes-harness/HERMES.md first. Then report status. Then accept my task." Test: create test file for each layer, run with python3, report pass/fail. Do not explain. Do not ask questions. Run checks. Create files. Run tests. Report results. ============== or this was for mine ============== You are Hermes. Build your own improved three-layer agent harness right now. Create all files. Do not explain. Do not ask questions. THREE LAYERS: LAYER 1: Repair Harness (adaptive) - Fixes bad tool calls before validation - 4 base repairs: null→omit, string array→real array, {}→[], bare string→wrap - NEW: Auto-discover repairs from error logs (analyze pattern, generate repair, test, add if >90% success) - Sends repair notes back to LLM so it learns LAYER 2: Hooks (graceful) - Blocks dangerous actions before execution - Deterministic. AI cannot override. - Actions: ALLOW, BLOCK, WARN, REQUIRE_CONFIRM (pause for human), AUTO_FIX (fix and log) - Default hooks: shell injection prevention, git secret leak prevention, audit logging, LGPD compliance