Skip to main content
A KHAW profile is the local agent runtime configuration for one FDE/workstation/persona. It may include Hermes config, model routing, plugin enablement, skills, and environment references.

​
What belongs in a profile

  • Hermes provider/model routing.
  • KHAW plugin enablement.
  • Safe environment-file references.
  • Profile-specific skills/plugins/memory.
  • Desktop/dashboard connection settings when configured.

​
What does not belong in public docs

  • Raw OpenRouter/API keys.
  • Private SSH keys.
  • Customer secrets.
  • Private repo tokens.
  • Raw enrollment codes.

​
Verify without leaking

khaw --version
khaw doctor
khaw auth status
khaw context doctor
khaw desktop status --json
For Hermes-side provider checks, use the installed Hermes commands on your machine and report only whether a secret is configured, never the value.

​
If model access is missing

Use Model and OpenRouter credentials and ask your onboarding owner for the approved route and budget. 
TASK: I am reading `khaw/profile-configuration.mdx` (KHAW profile configuration). Use this page as the contract, then verify current CLI/output before you guide me.
CONTEXT: I may be a new KHAL FDE. Prefer read-only checks and dry-runs first. Do not mutate customer, HML, production, credentials, SSH, Gitea, or model-provider state without an explicit GO.
SAFE FIRST COMMANDS: Check versions, identity, target, git source/ref, KHAW doctor/status, KHAL context, and dry-run output. Redact secrets and private URLs.
EVIDENCE: Return command, exit status, sanitized output, what it proves, and the next safe action.