Update Hermes

Treat a Hermes upgrade as a semantic migration and an image publication. Use the generic dependency-upgrade workflow for the full upstream audit. Apply the Hermes-specific contract checks in this skill before the PR is approval-ready.

Mutation boundary

Change only the NVIDIA/NemoClaw checkout in scope. Treat the Hermes repository, releases, package registries, and producer workflows as read-only. Do not update installer-managed copies or rebuild a local sandbox without explicit authorization for those host-visible changes.

Start with the generic audit

Read and follow nemoclaw-contributor-update-dependencies. Add its dependency-upgrade checklist to the working plan. Then read the Hermes contract map.