Command a server, or all of them
Every command is signed with the main key. A server refuses anything unsigned, stale, or outside its allowlist, and writes the refusal to its record. Results arrive within a minute.
Guide the Hermes on a server, or all of them
Guidance is pushed as a signed code update (hermes/GUIDANCE.md), backed up like any update, mirrored into Hermes' skills folder, and written to the record.