nix-hermes

Continuously read the homelab Splunk (SIEM) as a self-directed analyst — hunt for anything anomalous with strictly bounded queries, remember baselines, and alert only when something is genuinely off

Discover current leading OpenRouter models and live prices (public keyless API), select an escalation model for complicated work or advanced coding, call it through the LiteLLM router within a $1/day budget, and request onboarding of models the router does not serve yet

Open, update, dedupe, resolve, and auto-close homelab incidents in Zammad (the ITSM system of record) via its REST API — the durable ticket + knowledge-base layer behind the splunk-monitor alerts, keyed on a stable finding_key and lifecycle-tagged so agent-managed tickets yield to any human touch

Open signed, draft, no-merge doc PRs to dryvist docs repos

Triage, create and update GitHub Issues (all repos) and manage dryvist org Projects v2