{"site":"https://hermesplant.com","updatedAt":"2026-09-14T08:33:29.702Z","products":[{"slug":"destructguard","name":"DestructGuard","description":"Free hosted blocklist rules editor and JSONL audit log viewer that stop AI coding agents from running destructive shell, git, SQL, and infra commands. No signup, no install.","url":"https://hermesplant.com/products/destructguard","priceCents":0},{"slug":"incidentscribe","name":"IncidentScribe","description":"Free CLI and web tool that parse Cursor and Claude Code session JSONL into chronological incident timelines, flagging destructive shell commands, force pushes, and DB drops.","url":"https://hermesplant.com/products/incidentscribe","priceCents":0},{"slug":"reviewqueue","name":"ReviewQueue","description":"Human-in-the-loop approval queue for risky AI-agent commands - review, approve, or deny from a web queue.","url":"https://hermesplant.com/products/reviewqueue","priceCents":0},{"slug":"destructguard-pro","name":"DestructGuard Pro Pack","description":"Stop AI coding agents from running destructive commands. Full CLI with git hooks and audit log, plus 3 curated rules tiers and a team rollout playbook.","url":"https://hermesplant.com/products/destructguard-pro","priceCents":900},{"slug":"incidentscribe-postmortem-pack","name":"IncidentScribe Postmortem Pack","description":"Postmortem templates, team guide, and GitHub Action for agent session forensics.","url":"https://hermesplant.com/products/incidentscribe-postmortem-pack","priceCents":1200},{"slug":"reviewqueue-team-pack","name":"ReviewQueue Team Pack","description":"Slack/Telegram notifications, shared-queue guide, and audit rollup for agent approval teams.","url":"https://hermesplant.com/products/reviewqueue-team-pack","priceCents":1200},{"slug":"mcp-risk-analyzer","name":"MCP Risk Analyzer Operator Pack","description":"Evidence-backed MCP server risk analyzer - scores every manifest on signing, permissions, code execution, network surface, and supply-chain risk. Pay-per-call x402 API for agents.","url":"https://hermesplant.com/products/mcp-risk-analyzer","priceCents":1900},{"slug":"operator-os-core","name":"Operator OS - Revenue Solopreneur Core","description":"The 30-minute weekly system that runs your revenue: 8 AI prompts plus a Notion dashboard for solopreneurs.","url":"https://hermesplant.com/products/operator-os-core","priceCents":9700},{"slug":"agent-api-pass","name":"Agent API Pass","description":"$29/month with $35 of public-price-weighted endpoint credits, automatic per-call x402 fallback, and no raw-call arbitrage.","url":"https://hermesplant.com/products/agent-api-pass","priceCents":2900},{"slug":"assurance-team","name":"Assurance Team","description":"Founder-assisted agent-commerce controls for one team: shared payment policy, signed decisions, receipt history, drift evidence, and rollout support.","url":"https://hermesplant.com/products/assurance-team","priceCents":19900},{"slug":"assurance-business","name":"Assurance Business","description":"Founder-assisted assurance for production agent-commerce programs: organization controls, extended history, audit exports, SSO/security planning, and SLA design.","url":"https://hermesplant.com/products/assurance-business","priceCents":79900}],"pages":[{"path":"/guides/what-is-x402","title":"What is x402? The complete guide to the agent-payment protocol","description":"x402 lets AI agents pay for APIs per request using HTTP 402 and USDC settlement. How it works end to end — written by a team running x402 in production, with a live challenge you can reproduce.","url":"https://hermesplant.com/guides/what-is-x402","lastModified":"2026-07-03 12:14:43"},{"path":"/commands/aws-s3-rm","title":"aws s3 rm --recursive: what it deletes, safe flags, and recovery","description":"What aws s3 rm --recursive actually deletes, the --dryrun and --exclude flags that make it safer, versioned-bucket recovery options, and how to stop AI agents running it unattended.","url":"https://hermesplant.com/commands/aws-s3-rm","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/curl-pipe-sh","title":"curl | sh: what it executes, why it's risky, and how to vet scripts","description":"What curl | sh (and curl | bash) actually executes, the server-side and mid-download attacks it enables, and the download-inspect-run pattern that keeps installs auditable.","url":"https://hermesplant.com/commands/curl-pipe-sh","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/docker-rm-force","title":"docker rm -f — why AI agents must not run it unattended","description":"Force-removes running containers, stopping processes abruptly.","url":"https://hermesplant.com/commands/docker-rm-force","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/drop-database","title":"DROP DATABASE — why AI agents must not run it unattended","description":"Destroys an entire database and all contained data.","url":"https://hermesplant.com/commands/drop-database","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-clean-fdx","title":"git clean -fdx — why AI agents must not run it unattended","description":"Removes untracked files and directories including ignored build artifacts.","url":"https://hermesplant.com/commands/git-clean-fdx","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-push-force","title":"What does git push --force do? Risks, --force-with-lease, recovery","description":"What git push --force actually does to remote history, why --force-with-lease is the safer default, how to recover overwritten commits, and how to stop AI agents force-pushing unattended.","url":"https://hermesplant.com/commands/git-push-force","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-reset-hard","title":"git reset --hard explained: HEAD~1, reset to remote, and undo","description":"What git reset --hard discards, the HEAD~1 and origin/main variants, how to undo a hard reset with reflog, and how to stop AI coding agents running it unattended.","url":"https://hermesplant.com/commands/git-reset-hard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/kubectl-delete","title":"kubectl delete — why AI agents must not run it unattended","description":"Deletes Kubernetes resources including namespaces and workloads.","url":"https://hermesplant.com/commands/kubectl-delete","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/redis-flushall","title":"redis-cli FLUSHALL: what it wipes, FLUSHALL vs FLUSHDB, safer options","description":"What redis-cli FLUSHALL deletes (every key in every database), how it differs from FLUSHDB, the ASYNC variant, and how to keep AI agents from wiping a production Redis unattended.","url":"https://hermesplant.com/commands/redis-flushall","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/rm-rf","title":"rm -rf — why AI agents must not run it unattended","description":"Recursively deletes files and directories without confirmation.","url":"https://hermesplant.com/commands/rm-rf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/terraform-destroy","title":"terraform destroy: what it tears down, -target scoping, and guardrails","description":"What terraform destroy removes (everything in state), how -target and prevent_destroy scope the blast radius, and how to keep AI agents from destroying infrastructure unattended.","url":"https://hermesplant.com/commands/terraform-destroy","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/truncate-table","title":"TRUNCATE TABLE — why AI agents must not run it unattended","description":"Removes all rows from a table quickly, often without row-level undo.","url":"https://hermesplant.com/commands/truncate-table","lastModified":"2026-07-03 12:14:39"},{"path":"/guides/x402-and-mcp-for-ai-agents","title":"x402 and MCP: paid tools for AI agents","description":"How MCP (tool discovery) and x402 (per-call payment) compose so AI agents can find and pay for tools — no API key or subscription.","url":"https://hermesplant.com/guides/x402-and-mcp-for-ai-agents","lastModified":"2026-06-22 17:32:16"},{"path":"/guides/black-scholes-and-greeks-for-ai-agents","title":"Black-Scholes pricing and the Greeks for AI agents","description":"Black-Scholes pricing and the full Greek set (delta, gamma, vega, theta, rho) for AI agents — deterministic, pay-per-call OptionLens API over x402 at $0.25 per request.","url":"https://hermesplant.com/guides/black-scholes-and-greeks-for-ai-agents","lastModified":"2026-07-28 16:40:04"},{"path":"/guides/bond-analytics-for-ai-agents","title":"Bond yield, duration, and amortization for AI agents","description":"Bond yield-to-maturity, price, duration, convexity, and loan amortization for AI agents — BondLens deterministic pay-per-call API at $0.25 per request over x402.","url":"https://hermesplant.com/guides/bond-analytics-for-ai-agents","lastModified":"2026-06-27 14:20:45"},{"path":"/guides/dcf-and-irr-for-ai-agents","title":"DCF and IRR for AI agents: a pay-per-call cashflow API","description":"DCF, NPV, IRR, XIRR, MOIC, DPI, TVPI, and payback in one deterministic pay-per-call API for AI agents. CashflowLens runs the solver — no LLM hallucination on the numbers.","url":"https://hermesplant.com/guides/dcf-and-irr-for-ai-agents","lastModified":"2026-06-27 14:20:45"},{"path":"/guides/deterministic-finance-math-for-ai-agents","title":"Deterministic finance math for AI agents (why LLMs shouldn't compute an IRR)","description":"Why LLMs shouldn't compute IRR, Black-Scholes, or waterfall math — and how deterministic, audited finance APIs let AI agents return numbers they can defend to a risk desk.","url":"https://hermesplant.com/guides/deterministic-finance-math-for-ai-agents","lastModified":"2026-06-27 14:20:45"},{"path":"/guides/how-ai-agents-pay-for-apis-with-x402","title":"How AI agents pay for APIs with x402","description":"How AI agents pay for APIs over x402 — HTTP 402 challenges, USDC-on-Base settlement, the Bazaar discovery index, and how to wire payment into a Cursor or Claude Code agent.","url":"https://hermesplant.com/guides/how-ai-agents-pay-for-apis-with-x402","lastModified":"2026-07-28 16:40:05"},{"path":"/guides/lp-gp-distribution-waterfalls-for-ai-agents","title":"LP/GP distribution waterfalls for AI agents","description":"LP/GP distribution waterfalls for AI agents — return of capital, preferred return, GP catch-up, carry split. WaterfallLens deterministic API at $0.25 per call over x402.","url":"https://hermesplant.com/guides/lp-gp-distribution-waterfalls-for-ai-agents","lastModified":"2026-07-28 16:40:05"},{"path":"/guides/signed-receipts-for-ai-agent-actions","title":"Signed receipts for AI agent actions: the attestation loop","description":"Give every x402 payment and MCP tool call your agent makes a tamper-evident, third-party-verifiable receipt — one $0.05 attestation per action, free verification, no account required.","url":"https://hermesplant.com/guides/signed-receipts-for-ai-agent-actions","lastModified":"2026-07-13 13:08:37"},{"path":"/guides/validate-your-ai-agents-contact-list","title":"Validate your AI agent's contact list in 5 lines","description":"A copy-paste loop for AI agents: deterministic email validation and normalization over a whole contact list — free API key, no crypto wallet, the same verdict on every run.","url":"https://hermesplant.com/guides/validate-your-ai-agents-contact-list","lastModified":"2026-07-16 18:07:57"},{"path":"/guides/30-minute-revenue-week-playbook","title":"30-minute revenue week playbook for solopreneurs","description":"Duplicate the Notion template from the pack or recreate the four structures from templates/revenue-command-center.md in a Google Sheet or doc: MRR Log (Date, MR","url":"https://hermesplant.com/guides/30-minute-revenue-week-playbook","lastModified":"2026-07-03 12:14:39"},{"path":"/guides/agent-command-approval-playbook","title":"Agent command approval playbook","description":"Run `pip install -e \".[dev]\"` from the ReviewQueue repo (or your packaged install), then `reviewqueue init` on each machine where Cursor, Claude Code, or simila","url":"https://hermesplant.com/guides/agent-command-approval-playbook","lastModified":"2026-07-03 12:14:39"},{"path":"/guides/agent-jsonl-postmortem-playbook","title":"Agent JSONL postmortem playbook","description":"When a Cursor or Claude Code session causes an outage, export the agent session as JSONL before closing the IDE. The file contains tool calls, shell commands, a","url":"https://hermesplant.com/guides/agent-jsonl-postmortem-playbook","lastModified":"2026-07-03 12:14:39"},{"path":"/guides/blameless-agent-postmortem-rollout","title":"Blameless agent postmortem rollout for engineering teams","description":"Assign one export owner per incident (usually the on-call engineer or incident commander). Export the full agent session JSONL as soon as an incident is declare","url":"https://hermesplant.com/guides/blameless-agent-postmortem-rollout","lastModified":"2026-07-03 12:14:39"},{"path":"/guides/mcp-manifest-risk-review-playbook","title":"MCP manifest risk review playbook for agent operators","description":"From your agent host or Cursor/Claude config, collect the tools array: each entry must have a name, plus optional description, scopes or permissions, inputSchem","url":"https://hermesplant.com/guides/mcp-manifest-risk-review-playbook","lastModified":"2026-07-03 12:14:39"},{"path":"/guides/reviewqueue-team-rollout-playbook","title":"ReviewQueue Team Pack rollout for agent approval teams","description":"Run `pip install -e \".[dev]\"` from the ReviewQueue repo (or your packaged install), then `reviewqueue init` on each machine where Cursor, Claude Code, or simila","url":"https://hermesplant.com/guides/reviewqueue-team-rollout-playbook","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/aws-s3-rm/block-with-destructguard","title":"Block aws s3 rm --recursive with DestructGuard","description":"Configure DestructGuard to intercept aws s3 rm --recursive.","url":"https://hermesplant.com/commands/aws-s3-rm/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/curl-pipe-sh/block-with-destructguard","title":"Block curl | sh with DestructGuard","description":"Configure DestructGuard to intercept curl | sh.","url":"https://hermesplant.com/commands/curl-pipe-sh/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/docker-rm-force/block-with-destructguard","title":"Block docker rm -f with DestructGuard","description":"Configure DestructGuard to intercept docker rm -f.","url":"https://hermesplant.com/commands/docker-rm-force/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/drop-database/block-with-destructguard","title":"Block DROP DATABASE with DestructGuard","description":"Configure DestructGuard to intercept DROP DATABASE.","url":"https://hermesplant.com/commands/drop-database/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-clean-fdx/block-with-destructguard","title":"Block git clean -fdx with DestructGuard","description":"Configure DestructGuard to intercept git clean -fdx.","url":"https://hermesplant.com/commands/git-clean-fdx/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-push-force/block-with-destructguard","title":"Block git push --force with DestructGuard","description":"Configure DestructGuard to intercept git push --force.","url":"https://hermesplant.com/commands/git-push-force/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-reset-hard/block-with-destructguard","title":"Block git reset --hard with DestructGuard","description":"Configure DestructGuard to intercept git reset --hard.","url":"https://hermesplant.com/commands/git-reset-hard/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/kubectl-delete/block-with-destructguard","title":"Block kubectl delete with DestructGuard","description":"Configure DestructGuard to intercept kubectl delete.","url":"https://hermesplant.com/commands/kubectl-delete/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/redis-flushall/block-with-destructguard","title":"Block redis-cli FLUSHALL with DestructGuard","description":"Configure DestructGuard to intercept redis-cli FLUSHALL.","url":"https://hermesplant.com/commands/redis-flushall/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/rm-rf/block-with-destructguard","title":"Block rm -rf with DestructGuard","description":"Configure DestructGuard to intercept rm -rf.","url":"https://hermesplant.com/commands/rm-rf/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/terraform-destroy/block-with-destructguard","title":"Block terraform destroy with DestructGuard","description":"Configure DestructGuard to intercept terraform destroy.","url":"https://hermesplant.com/commands/terraform-destroy/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/truncate-table/block-with-destructguard","title":"Block TRUNCATE TABLE with DestructGuard","description":"Configure DestructGuard to intercept TRUNCATE TABLE.","url":"https://hermesplant.com/commands/truncate-table/block-with-destructguard","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/x402-vs-api-keys","title":"x402 vs API keys","description":"API keys assume a human provisions and stores a credential up front; x402 lets the caller pay per request with no credential at all. For autonomous agents, x402","url":"https://hermesplant.com/compare/x402-vs-api-keys","lastModified":"2026-06-22 17:32:16"},{"path":"/compare/x402-vs-stripe-metered-billing","title":"x402 vs Stripe metered billing","description":"For human-owned SaaS with accounts, Stripe metered billing is the standard. For autonomous agents that can't sign up or hold a saved card, x402 settles each cal","url":"https://hermesplant.com/compare/x402-vs-stripe-metered-billing","lastModified":"2026-06-22 17:32:16"},{"path":"/compare/buy-finance-agent-suite-vs-build-it-yourself","title":"Buying a finance API suite vs building the math yourself","description":"Buy when you want correct, audited finance math now and your edge is the agent, not the quant library. Build when the calculations are your core IP or you have ","url":"https://hermesplant.com/compare/buy-finance-agent-suite-vs-build-it-yourself","lastModified":"2026-07-28 16:40:05"},{"path":"/compare/incidentscribe-postmortem-pack-vs-blank-templates","title":"IncidentScribe Postmortem Pack vs blank Confluence templates","description":"Blank templates excel at org-specific narrative and approval workflows but leave the timeline table empty — someone must reconstruct agent commands by hand. The","url":"https://hermesplant.com/compare/incidentscribe-postmortem-pack-vs-blank-templates","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/incidentscribe-vs-manual-grep","title":"IncidentScribe vs manual grep on JSONL","description":"grep and jq excel at one-off string searches but do not build a chronological narrative or flag severity. IncidentScribe automates ordering, critical highlighti","url":"https://hermesplant.com/compare/incidentscribe-vs-manual-grep","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/llm-math-vs-deterministic-finance-api","title":"LLM math vs a deterministic finance API","description":"For valuation, pricing, and risk, route the math to a deterministic API; keep the LLM for orchestration. A model that 'usually gets the IRR close' is a liabilit","url":"https://hermesplant.com/compare/llm-math-vs-deterministic-finance-api","lastModified":"2026-07-28 16:40:05"},{"path":"/compare/mcp-risk-analyzer-vs-orbis-risk-profiler","title":"MCP Risk Analyzer vs orbisapi MCP Risk Profiler","description":"Opaque profilers give a fast go/no-go number at lower per-call cost. MCP Risk Analyzer (including the Operator Pack local CLI) returns the list of exact offendi","url":"https://hermesplant.com/compare/mcp-risk-analyzer-vs-orbis-risk-profiler","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/operator-os-core-vs-ad-hoc-spreadsheet-reviews","title":"Operator OS Core vs ad-hoc spreadsheet revenue tracking","description":"Ad-hoc tracking works while your client count is tiny and memory is fresh, but it skips structure and forces you to reinvent the analysis every week. Operator O","url":"https://hermesplant.com/compare/operator-os-core-vs-ad-hoc-spreadsheet-reviews","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/reviewqueue-team-pack-vs-manual-polling","title":"ReviewQueue Team Pack vs manual queue polling","description":"Manual polling works for solo pilots and low-volume queues but scales poorly when reviewers are in meetings or across time zones. Team Pack scripts push structu","url":"https://hermesplant.com/compare/reviewqueue-team-pack-vs-manual-polling","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/reviewqueue-vs-blocklists-only","title":"ReviewQueue vs blocklists only","description":"Blocklists scale instant prevention for known-bad patterns but cannot judge novel commands in context. ReviewQueue adds a human checkpoint for risky or ambiguou","url":"https://hermesplant.com/compare/reviewqueue-vs-blocklists-only","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/x402-pay-per-call-vs-api-subscriptions","title":"x402 pay-per-call vs API-key subscriptions","description":"For autonomous agents, x402 pay-per-call removes the signup, key management, and minimums that subscriptions impose — the agent pays for exactly what it uses. S","url":"https://hermesplant.com/compare/x402-pay-per-call-vs-api-subscriptions","lastModified":"2026-07-28 16:40:05"},{"path":"/commands/aws-s3-rm/for-claude-code","title":"aws s3 rm --recursive in Claude Code — agent safety guide","description":"Why Claude Code agents run aws s3 rm --recursive and how to block it.","url":"https://hermesplant.com/commands/aws-s3-rm/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/aws-s3-rm/for-cursor","title":"aws s3 rm --recursive in Cursor — agent safety guide","description":"Why Cursor agents run aws s3 rm --recursive and how to block it.","url":"https://hermesplant.com/commands/aws-s3-rm/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/aws-s3-rm/for-github-copilot","title":"aws s3 rm --recursive in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run aws s3 rm --recursive and how to block it.","url":"https://hermesplant.com/commands/aws-s3-rm/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/aws-s3-rm/for-windsurf","title":"aws s3 rm --recursive in Windsurf — agent safety guide","description":"Why Windsurf agents run aws s3 rm --recursive and how to block it.","url":"https://hermesplant.com/commands/aws-s3-rm/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/curl-pipe-sh/for-claude-code","title":"curl | sh in Claude Code — agent safety guide","description":"Why Claude Code agents run curl | sh and how to block it.","url":"https://hermesplant.com/commands/curl-pipe-sh/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/curl-pipe-sh/for-cursor","title":"curl | sh in Cursor — agent safety guide","description":"Why Cursor agents run curl | sh and how to block it.","url":"https://hermesplant.com/commands/curl-pipe-sh/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/curl-pipe-sh/for-github-copilot","title":"curl | sh in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run curl | sh and how to block it.","url":"https://hermesplant.com/commands/curl-pipe-sh/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/curl-pipe-sh/for-windsurf","title":"curl | sh in Windsurf — agent safety guide","description":"Why Windsurf agents run curl | sh and how to block it.","url":"https://hermesplant.com/commands/curl-pipe-sh/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/docker-rm-force/for-claude-code","title":"docker rm -f in Claude Code — agent safety guide","description":"Why Claude Code agents run docker rm -f and how to block it.","url":"https://hermesplant.com/commands/docker-rm-force/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/docker-rm-force/for-cursor","title":"docker rm -f in Cursor — agent safety guide","description":"Why Cursor agents run docker rm -f and how to block it.","url":"https://hermesplant.com/commands/docker-rm-force/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/docker-rm-force/for-github-copilot","title":"docker rm -f in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run docker rm -f and how to block it.","url":"https://hermesplant.com/commands/docker-rm-force/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/docker-rm-force/for-windsurf","title":"docker rm -f in Windsurf — agent safety guide","description":"Why Windsurf agents run docker rm -f and how to block it.","url":"https://hermesplant.com/commands/docker-rm-force/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/drop-database/for-claude-code","title":"DROP DATABASE in Claude Code — agent safety guide","description":"Why Claude Code agents run DROP DATABASE and how to block it.","url":"https://hermesplant.com/commands/drop-database/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/drop-database/for-cursor","title":"DROP DATABASE in Cursor — agent safety guide","description":"Why Cursor agents run DROP DATABASE and how to block it.","url":"https://hermesplant.com/commands/drop-database/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/drop-database/for-github-copilot","title":"DROP DATABASE in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run DROP DATABASE and how to block it.","url":"https://hermesplant.com/commands/drop-database/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/drop-database/for-windsurf","title":"DROP DATABASE in Windsurf — agent safety guide","description":"Why Windsurf agents run DROP DATABASE and how to block it.","url":"https://hermesplant.com/commands/drop-database/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-clean-fdx/for-claude-code","title":"git clean -fdx in Claude Code — agent safety guide","description":"Why Claude Code agents run git clean -fdx and how to block it.","url":"https://hermesplant.com/commands/git-clean-fdx/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-clean-fdx/for-cursor","title":"git clean -fdx in Cursor — agent safety guide","description":"Why Cursor agents run git clean -fdx and how to block it.","url":"https://hermesplant.com/commands/git-clean-fdx/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-clean-fdx/for-github-copilot","title":"git clean -fdx in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run git clean -fdx and how to block it.","url":"https://hermesplant.com/commands/git-clean-fdx/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-clean-fdx/for-windsurf","title":"git clean -fdx in Windsurf — agent safety guide","description":"Why Windsurf agents run git clean -fdx and how to block it.","url":"https://hermesplant.com/commands/git-clean-fdx/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-push-force/for-claude-code","title":"git push --force in Claude Code — agent safety guide","description":"Why Claude Code agents run git push --force and how to block it.","url":"https://hermesplant.com/commands/git-push-force/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-push-force/for-cursor","title":"git push --force in Cursor — agent safety guide","description":"Why Cursor agents run git push --force and how to block it.","url":"https://hermesplant.com/commands/git-push-force/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-push-force/for-github-copilot","title":"git push --force in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run git push --force and how to block it.","url":"https://hermesplant.com/commands/git-push-force/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-push-force/for-windsurf","title":"git push --force in Windsurf — agent safety guide","description":"Why Windsurf agents run git push --force and how to block it.","url":"https://hermesplant.com/commands/git-push-force/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-reset-hard/for-claude-code","title":"git reset --hard in Claude Code — agent safety guide","description":"Why Claude Code agents run git reset --hard and how to block it.","url":"https://hermesplant.com/commands/git-reset-hard/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-reset-hard/for-cursor","title":"git reset --hard in Cursor — agent safety guide","description":"Why Cursor agents run git reset --hard and how to block it.","url":"https://hermesplant.com/commands/git-reset-hard/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-reset-hard/for-github-copilot","title":"git reset --hard in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run git reset --hard and how to block it.","url":"https://hermesplant.com/commands/git-reset-hard/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/git-reset-hard/for-windsurf","title":"git reset --hard in Windsurf — agent safety guide","description":"Why Windsurf agents run git reset --hard and how to block it.","url":"https://hermesplant.com/commands/git-reset-hard/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/kubectl-delete/for-claude-code","title":"kubectl delete in Claude Code — agent safety guide","description":"Why Claude Code agents run kubectl delete and how to block it.","url":"https://hermesplant.com/commands/kubectl-delete/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/kubectl-delete/for-cursor","title":"kubectl delete in Cursor — agent safety guide","description":"Why Cursor agents run kubectl delete and how to block it.","url":"https://hermesplant.com/commands/kubectl-delete/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/kubectl-delete/for-github-copilot","title":"kubectl delete in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run kubectl delete and how to block it.","url":"https://hermesplant.com/commands/kubectl-delete/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/kubectl-delete/for-windsurf","title":"kubectl delete in Windsurf — agent safety guide","description":"Why Windsurf agents run kubectl delete and how to block it.","url":"https://hermesplant.com/commands/kubectl-delete/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/redis-flushall/for-claude-code","title":"redis-cli FLUSHALL in Claude Code — agent safety guide","description":"Why Claude Code agents run redis-cli FLUSHALL and how to block it.","url":"https://hermesplant.com/commands/redis-flushall/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/redis-flushall/for-cursor","title":"redis-cli FLUSHALL in Cursor — agent safety guide","description":"Why Cursor agents run redis-cli FLUSHALL and how to block it.","url":"https://hermesplant.com/commands/redis-flushall/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/redis-flushall/for-github-copilot","title":"redis-cli FLUSHALL in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run redis-cli FLUSHALL and how to block it.","url":"https://hermesplant.com/commands/redis-flushall/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/redis-flushall/for-windsurf","title":"redis-cli FLUSHALL in Windsurf — agent safety guide","description":"Why Windsurf agents run redis-cli FLUSHALL and how to block it.","url":"https://hermesplant.com/commands/redis-flushall/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/rm-rf/for-claude-code","title":"rm -rf in Claude Code — agent safety guide","description":"Why Claude Code agents run rm -rf and how to block it.","url":"https://hermesplant.com/commands/rm-rf/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/rm-rf/for-cursor","title":"rm -rf in Cursor — agent safety guide","description":"Why Cursor agents run rm -rf and how to block it.","url":"https://hermesplant.com/commands/rm-rf/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/rm-rf/for-github-copilot","title":"rm -rf in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run rm -rf and how to block it.","url":"https://hermesplant.com/commands/rm-rf/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/rm-rf/for-windsurf","title":"rm -rf in Windsurf — agent safety guide","description":"Why Windsurf agents run rm -rf and how to block it.","url":"https://hermesplant.com/commands/rm-rf/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/terraform-destroy/for-claude-code","title":"terraform destroy in Claude Code — agent safety guide","description":"Why Claude Code agents run terraform destroy and how to block it.","url":"https://hermesplant.com/commands/terraform-destroy/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/terraform-destroy/for-cursor","title":"terraform destroy in Cursor — agent safety guide","description":"Why Cursor agents run terraform destroy and how to block it.","url":"https://hermesplant.com/commands/terraform-destroy/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/terraform-destroy/for-github-copilot","title":"terraform destroy in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run terraform destroy and how to block it.","url":"https://hermesplant.com/commands/terraform-destroy/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/terraform-destroy/for-windsurf","title":"terraform destroy in Windsurf — agent safety guide","description":"Why Windsurf agents run terraform destroy and how to block it.","url":"https://hermesplant.com/commands/terraform-destroy/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/truncate-table/for-claude-code","title":"TRUNCATE TABLE in Claude Code — agent safety guide","description":"Why Claude Code agents run TRUNCATE TABLE and how to block it.","url":"https://hermesplant.com/commands/truncate-table/for-claude-code","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/truncate-table/for-cursor","title":"TRUNCATE TABLE in Cursor — agent safety guide","description":"Why Cursor agents run TRUNCATE TABLE and how to block it.","url":"https://hermesplant.com/commands/truncate-table/for-cursor","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/truncate-table/for-github-copilot","title":"TRUNCATE TABLE in GitHub Copilot — agent safety guide","description":"Why GitHub Copilot agents run TRUNCATE TABLE and how to block it.","url":"https://hermesplant.com/commands/truncate-table/for-github-copilot","lastModified":"2026-07-03 12:14:39"},{"path":"/commands/truncate-table/for-windsurf","title":"TRUNCATE TABLE in Windsurf — agent safety guide","description":"Why Windsurf agents run TRUNCATE TABLE and how to block it.","url":"https://hermesplant.com/commands/truncate-table/for-windsurf","lastModified":"2026-07-03 12:14:39"},{"path":"/compare/incidentscribe-vs-manual-timelines","title":"IncidentScribe vs manual timelines","description":"IncidentScribe vs hand-built JSONL timelines for agent postmortems — automated ordering, critical-command highlighting, and shareable Markdown vs error-prone manual parsing.","url":"https://hermesplant.com/compare/incidentscribe-vs-manual-timelines","lastModified":"2026-06-27 14:20:45"}]}