{"type":"rich","version":"1.0","title":" wrote","author_name":"npub1jzd5utx9s38suxmpjd3e8mme6u8act9ztpw3lwgg4qtc69gfrvjqhhpezd","author_url":"https://nostr.now/npub1jzd5utx9s38suxmpjd3e8mme6u8act9ztpw3lwgg4qtc69gfrvjqhhpezd","provider_name":"njump","provider_url":"https://nostr.now","html":"Setting up Hermes agent: a practical checklist\n\nSteps, addresses, pitfalls. No theory.\n\nUse a machine you can afford to lose. It has file, terminal and email access, so it will sometimes change or delete the wrong thing.\n\n1. A MAILBOX YOU OWN\n\nhttps://proton.me - Free plan, no card. A username that does not identify you. 2FA on immediately, and write the recovery phrase down: Proton cannot reset your password.\n\nNo IMAP or SMTP on free, so no mail client can read that mailbox. Fine here - just know it.\n\n2. DIFFERENT ADDRESSES\n\nSeveral separate free Proton accounts, one per group of services. Each gives ONE address, so 3 or 4 addresses means 3 or 4 accounts, each with its own password and recovery phrase.\n\nProton's terms prohibit \"operating a large number of free Accounts for a single organization or individual\". A few personal accounts is not bulk signup, but know where you stand.\n\n3. YOUR IDENTITY IS THREE THINGS\n\nDATE OF BIRTH: never the real one unless the law requires it. It resets passwords, it links records about you, and you cannot change it. Use a consistent near-date.\n\nPHONE: services demand one for SMS verification. Rent one:\n\nhttps://nadanada.me - disposable or rental, about $1.50, no account\n\nhttps://sms4sats.com - one-time, 1,500 sats\n\nA one-time number cannot receive a SECOND SMS: if the service texts again for a login or recovery code, you are locked out for good. Rent one you keep. Whoever rents it sees every code sent to it, so never for a bank.\n\n4. A MODEL\n\nhttps://platform.deepseek.com - sign up with one of your addresses, not your real one. Top up small, on a disposable card or with bitcoin - never the card that pays your bills. Copy the API key as soon as you make it.\n\n5. INSTALL HERMES\n\ncurl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash\n\nhermes setup, paste that key, then hermes doctor until it is green.\n\nSecrets in ~/.hermes/.env, settings in config.yaml - never hand-edit config.yaml, one stray space corrupts it.\n\n6. THEN HAND IT OVER\n\nName the outcome and let it work out the commands. \"Get my email working\" beats \"run this command\". Every step below, just ask:\n\n\"Hermes, look into setting up ...\" / \"Hermes, give me detailed instructions on ...\"\n\n7. ITS OWN EMAIL\n\nAgentMail will likely reject your Proton address at signup - it blocklists some provider domains. https://atomicmail.io worked: free, 10 aliases, no phone needed.\n\nThen https://console.agentmail.to - API key, then an inbox. Verify the 6-digit code or sending is blocked. A new inbox silently rejects unknown senders: if a verification email vanishes, check the allow-list.\n\n8. REACH IT FROM YOUR PHONE\n\nhttps://tailscale.com/download on both, same account.\n\nhermes dashboard (it binds to localhost - leave it), then: tailscale serve --bg 9119\n\nServe shares with your own devices. Funnel publishes to the whole internet. Never funnel the dashboard - a funnelled shell is a shell online.\n\n9. VISION\n\nDeepSeek Flash already reads images, nothing to set up.\n\nTo keep images on your own machine instead, ask your agent to set up qwen3-vl on Ollama:\n\nhttps://ollama.com\n\n10. IMAGES\n\nhttps://ppq.ai - one key, many models, grok-imagine among them at a few cents an image. The key is a wallet: keep top-ups small.\n\n11. PRACTICAL ADVICE\n\nSKILLS: after each thing works, have the agent write it down as a skill. Same prefix on every name so they group, amnesia-proof, tested in a fresh session. \"Hermes, set up a skill called 'Arnie-email'; write what you learned and make it amnesia-proof, so even if you forget everything you can get back to where you are now.\"\n\nADVERSARIAL CHECK: add \"and then check it adversarially, argue against it, try to break it\" to any request. Critical errors get found.\n\nBACKUPS: get the path, write it down outside the machine, make it test the restore, and ask which part goes where and what it excludes. A backup nobody has restored from is a hope.\n\nONE NOTE PER SERVICE: the address you used, any rented number, where the secret lives. Where things are, not the secrets.\n\nBITCOIN: where a service takes it, pay with it - no card number to steal, nothing to reuse. Where it does not, a disposable virtual card does the same job.\n\nREPETITION: nothing works the first time, or the tenth. Sometimes the forty-second.\n\n12. WHAT NOT TO DO\n\nDo not expose the dashboard. Do not give an agent your main mailbox or brokerage credentials. Do not treat a confident answer as a correct one - it sounds the same either way."}