---
description: Inspect or safely install the fail-closed Hermes watchdog
argument-hint: "<status|install|update|uninstall> [--profile NAME] [--force] [--dry-run]"
---

Ask the user before every write or `--force`. Use the deterministic watchdog installer only; status is read-only, stopped profiles require explicit `--profile`, and the controller never changes Hermes services, starts a watcher, or changes unrelated permissions. Gate O remains unproven and fail-closed: no live origin delivery, steering, surgical, or out-of-turn chat claim.