Skip to main content
KHAW is how a KHAL FDE and their agent become operational without forking upstream Hermes. It packages install/update policy, doctor checks, profile templates, Purpose Sessions, Work Registry views, slash commands, context tools, and evidence habits around Hermes.

​
What KHAW owns

  • FDE onboarding/provision/verify plans, including pre-email --email-local receipts.
  • KHAW CLI (khaw) status, doctor, update, auth, onboarding, FDE, SSH, context, apps, app-deploy, app-share, and desktop helper flows.
  • Hermes plugin surfaces such as /khaw, /wish, /brainstorm, KHAW tools, Purpose Session registry, Work Registry evidence, and Brain ask when configured.
  • Brain-canonical work artifacts under brain/wishes/.
  • Agent-first context: what to paste to a KHAW/Hermes agent, what evidence to collect, and what to avoid.

​
What KHAW does not own

  • Customer, HML, or production mutation without approval.
  • Private repo secrets in public docs.
  • Raw model-provider credentials.
  • Replacing upstream Hermes core when a plugin/tool/hook can do the job.
  • Brain/Khortex runtime ownership; KHAW may expose, call, or install bridges while preserving ownership boundaries.

​
First commands

khaw --version
khaw status
khaw doctor
khaw fde verify --from ./fde-provision.receipt.json --dry-run --json
khaw context doctor
khaw apps list --json
Simulated output: 
KHAW version: 1.0.x
KHAW build status: ok
Doctor: OK for native harness
mutation: none

​
Hermes plugin proof

Inside a KHAW-enabled Hermes session: 
/khaw status
/wish help
/brainstorm "review this decision"
See KHAW agent quickstart, slash commands, and evidence habits. 
TASK: I am reading `khaw/what-is-khaw.mdx` (What is KHAW?). Use this page as the contract, then verify current CLI/output before you guide me.
CONTEXT: I may be a new KHAL FDE. Prefer read-only checks and dry-runs first. Do not mutate customer, HML, production, credentials, SSH, Gitea, or model-provider state without an explicit GO.
SAFE FIRST COMMANDS: Check versions, identity, target, git source/ref, KHAW doctor/status, KHAL context, and dry-run output. Redact secrets and private URLs.
EVIDENCE: Return command, exit status, sanitized output, what it proves, and the next safe action.