Hermes Attestation Guardian

IMPORTANT SCOPE:

• This skill targets Hermes infrastructure only (CLI/Gateway/profile-managed deployments).
• This skill is not an OpenClaw runtime hook package.

Goal

Generate deterministic Hermes posture attestations, verify them with fail-closed integrity checks, and compare baseline drift using stable severity mapping.

Mandatory release verification gate (before install)

Before treating any release install instructions as valid, verify all three inputs:

1. checksums.json
2. checksums.sig
3. pinned signing public-key fingerprint