Local email gatekeeper on a Mac mini so the agent never sees 2FA codes
I wanted my Hermes agent to read my emails and draft replies. But I did not want Hermes to have access to everything. Specifically not 2FA codes, password resets, or banking notifications. If my agent ever got compromised, those should never be within reach.
— u/HolmeBengt, 2026-07-05, via Reddit.