ReviewQueue

Human approval queue for risky agent shell commands. Agents propose actions; you approve before anything hits production.

Open queue viewer Try sample queue

The problem

Coding agents can run shell commands autonomously — including git push, deploys, and destructive operations. One misread instruction can ship broken code or wipe data. You need a gate between the agent and the shell, with a clear audit trail.

When agents gained shell access, incidents followed: unintended production deploys, leaked credentials in logs, and destructive commands run without a human in the loop.

Proof

A real pending queue shows what your reviewer sees before approving — risky commands held with git context, not executed blindly.

ID	Command	Risk	Git context
`rq-20260610-a1b2c3`	`git push origin main`	git_push	main · src/deploy.sh \| 12 +++++------
`rq-20260610-d4e5f6`	`vercel deploy --prod`	deploy	—

Why now

Agents run shell commands autonomously in CI, local dev, and cloud sandboxes. Static blocklists miss novel paths — new CLIs, one-off scripts, and chained pipes that look safe until they are not. A human approval step with context beats hoping the model guessed right.

How it works

1. Agent proposes a commandRisky argv lists are classified and held in a local pending queue instead of running immediately.
2. You review contextSee the command, working directory, git branch, and diff stat before deciding.
3. Approve or rejectApproved commands execute once; every transition is logged to JSONL for compliance.

Pricing

Free

Local approval queue
CLI + paste viewers
JSONL audit log

Open queue viewer

Team Pack

$12 one-time

Slack & Telegram notifications
Shared queue guide
Audit rollup scripts

Buy Team Pack

Hosted Team

$12/month (coming soon)

Cloud queue sync
Managed Slack & Telegram
90-day hosted audit

Requires Plant subscription infrastructure — join waitlist.

Join Hosted Team waitlist

One-time purchase on hermesplant.com. Powered by Stripe. x402 supported where enabled. Instant download + 14-day refund.

Buyer proof

“An AI agent deleted our production database” (860 pts, HN) is one public record of damage from an unreviewed agent command. Team Pack buyers get Slack and Telegram notifications plus the shared queue guide for immediate team activation across machines.

Team ROI

$12 one-time protects against incidents costing orders of magnitude more; shared queue + notifications cut cross-machine review latency for 2-8 person teams.

Upgrade path

Team Pack is the on-ramp: immediate Slack/Telegram notifications and git-sync across machines today. Hosted Team ($12/month) adds automatic cloud sync and managed notifications when Plant entitlement infrastructure ships — no committed ship date. Join the Hosted Team waitlist or see V1.1-PLAN.md for the full funnel.

Get started with the pack

Get Team Pack for your team

Setup effort

Minutes, not days. Most teams are live in <10 minutes. Start with the pack checklist or reviewqueue init + reviewqueue exec.