Agent Access Zones

Zones
18

Folders with explicit access intent.

Shared With Every Agent
3

Safe default context like company overview and playbooks.

Private Zones
3

Manager-only by default.

Access Matrix

Use this as the file-access map for Hermes agents that read and write the shared workspace.

Company Overview
Agent
Company Overview
company-overview/**
Contacts
dashboard/data/ghl-contacts.json
Client Accounts
clients/**
Prospect Accounts
accounts/prospects/**
Customer Accounts
accounts/customers/**
Partner Accounts
accounts/partners/**
Internal Accounts
accounts/internal/**
Other Accounts
accounts/other/**
Sales Workspace
sales/**
Support Workspace
support/**
Onboarding Workspace
onboarding/**
Product Workspace
product/**
Marketing Workspace
marketing/**
Team Private
team/**, meetings/one-on-ones/**
Finance
finance/**, metrics/revenue.md
Strategy
strategy/**, kpis/**, okrs/**
Playbooks
playbooks/**
Agent Command Center
agent-command-center/**
Manager Command
Executive operator
Write Write Write Write Write Write Write Write Write Write Write Write Write Write Write Write Write Write
Sales Runtime
SDR and prospect research
Read Read No Access Write Read Write No Access Write Write No Access No Access Read No Access No Access No Access Read Read Write
Client Success
Customer relationship and retention
Read Read Write No Access Write Read No Access No Access Read Write Read Read No Access No Access No Access Read Read Write
Support Specialist
Inbound support and ticket resolution
Read Read Read No Access Read No Access No Access No Access No Access Write Read Read No Access No Access No Access No Access Read Write
Onboarding Specialist
Customer activation
Read Read Write No Access Write No Access No Access No Access Read Read Write Read No Access No Access No Access Read Read Write
Finance Analyst
Finance and unit economics
Read Read Approval Read Read Read No Access Read Approval No Access No Access Read No Access No Access Write Read Read Write
Marketing Strategist
Positioning and demand generation
Read Read Read Read Read Read No Access Read Read No Access No Access Read Write No Access No Access Read Read Write

Company Overview

shared

Shared company context every agent can safely use.

Owner
Manager
company-overview/**
Includes
  • - Mission
  • - vision summary
  • - public roster
  • - company rocks
  • - high-level OKRs
Excludes
  • - Compensation
  • - one-on-ones
  • - private reviews
  • - sensitive personnel notes

Contacts

restricted

GoHighLevel contact cache rendered by the Contacts dashboard.

Owner
Sales
dashboard/data/ghl-contacts.json
Includes
  • - Contact names
  • - email addresses
  • - phone numbers
  • - company names
  • - tags
Excludes
  • - Legacy account profiles
  • - private team notes
  • - financial commitments

Client Accounts

restricted

Full client account workspaces, client details, account team, onboarding tabs, support logs, configuration notes, assets, reporting, and internal account notes.

Owner
Client Success
clients/**
Includes
  • - Client overview records
  • - client team members
  • - account strategy
  • - onboarding docs
  • - support request logs
  • - configuration notes
  • - meeting transcripts
  • - assets
  • - reporting
Excludes
  • - Private employee files
  • - finance planning outside client account context
  • - unapproved customer-facing commitments

Prospect Accounts

restricted

Prospect profiles, call transcripts, research, and SDR next actions.

Owner
Sales
accounts/prospects/**
Includes
  • - Prospect profiles
  • - Fathom transcripts
  • - research
  • - follow-up notes
Excludes
  • - Customer support history
  • - team private notes

Customer Accounts

restricted

Customer relationship context for support, success, and onboarding.

Owner
Client Success
accounts/customers/**
Includes
  • - Customer profiles
  • - support context
  • - onboarding notes
  • - account history
Excludes
  • - Prospect-only sales strategy unless explicitly copied here

Partner Accounts

restricted

Referral, agency, reseller, and partner relationship records.

Owner
Sales
accounts/partners/**
Includes
  • - Partner profiles
  • - referral notes
  • - partner transcripts
Excludes
  • - Customer delivery notes unless linked from a customer account

Internal Accounts

private

Internal company, vendor, and operational account context.

Owner
Manager
accounts/internal/**
Includes
  • - Vendors
  • - internal calls
  • - operations notes
Excludes
  • - One-on-ones and compensation, which stay in team-private

Other Accounts

restricted

Uncategorized or review-needed accounts that should not be forced into a sales, customer, partner, or internal zone yet.

Owner
Manager
accounts/other/**
Includes
  • - Unclassified accounts
  • - review queue profiles
  • - miscellaneous account notes
Excludes
  • - Team-private notes
  • - finance-only records
  • - confirmed customer support context

Sales Workspace

restricted

Deals, partners, sales targets, pipeline strategy, and email drafts.

Owner
Sales
sales/**
Includes
  • - Deals
  • - partners
  • - sales resources
  • - ICP notes
Excludes
  • - Customer support operating details unless copied into account folders

Support Workspace

restricted

Support triage, customer issues, macros, and service recovery notes.

Owner
Client Success
support/**
Includes
  • - Support tickets
  • - resolution notes
  • - service recovery context
Excludes
  • - Private employee data
  • - sales-only negotiation notes

Onboarding Workspace

restricted

Customer setup plans, kickoff assets, checklists, and handoff notes.

Owner
Client Success
onboarding/**
Includes
  • - Kickoff notes
  • - setup checklists
  • - handoff records
Excludes
  • - Unrelated sales negotiations and team private files

Product Workspace

restricted

Product docs, bugs, feature context, and implementation references.

Owner
Product
product/**
Includes
  • - Roadmaps
  • - feature notes
  • - support-to-product feedback
Excludes
  • - One-on-one reviews and private performance notes

Marketing Workspace

restricted

Campaigns, automations, positioning, marketing assets, and demand-generation work.

Owner
Marketing
marketing/**
Includes
  • - Campaign notes
  • - automation docs
  • - positioning work
  • - marketing assets
Excludes
  • - Private team notes
  • - finance-only planning
  • - unapproved customer commitments

Team Private

private

Private team member context reserved for manager-level agents.

Owner
Manager
team/**, meetings/one-on-ones/**
Includes
  • - Bios
  • - one-on-ones
  • - coaching notes
  • - performance context
Excludes
  • - Anything a role-specific Slack agent should casually disclose

Finance

private

Financial planning, sensitive metrics, pricing, and margin analysis.

Owner
Finance
finance/**, metrics/revenue.md
Includes
  • - Revenue metrics
  • - pricing models
  • - cash planning
Excludes
  • - Broad customer-facing operational context

Strategy

restricted

Executive direction, progress journal, KPI snapshots, and OKRs.

Owner
Manager
strategy/**, kpis/**, okrs/**
Includes
  • - Vision
  • - milestones
  • - OKRs
  • - KPI snapshots
Excludes
  • - Private employee coaching unless copied into team-private

Playbooks

shared

Shared operating playbooks and templates for repeatable workflows.

Owner
Operations
playbooks/**
Includes
  • - Playbook structure
  • - required inputs
  • - steps
  • - done criteria
  • - approved operating workflows
Excludes
  • - Client-specific instructions unless copied into client folders
  • - secrets

Agent Command Center

restricted

Shared Hermes agent threads, structured handoffs, and coordination status history.

Owner
Manager
agent-command-center/**
Includes
  • - All-agent thread
  • - one-on-one threads
  • - handoff records
  • - status history
Excludes
  • - Secrets
  • - private team notes
  • - approval bypasses
  • - external commitments without Keeton approval

Recommended Container Pattern

The real security boundary is the production Hermes container mount. This dashboard only shows the intended file-access map.

Manager Command
/workspace
18 write zones
Sales Runtime
/opt/data/workspace
5 write zones
Client Success
/opt/data/workspace
4 write zones
Support Specialist
/opt/data/workspace
2 write zones
Onboarding Specialist
/opt/data/workspace
4 write zones
Finance Analyst
/opt/data/workspace
2 write zones
Marketing Strategist
/opt/data/workspace
2 write zones
volumes:
  - /mnt/agent-data/hermes/shared/company-overview:/workspace/company-overview:ro
  - /mnt/agent-data/hermes/sdr/sales:/workspace/sales:rw
  - /mnt/agent-data/hermes/shared/playbooks/_template.md:/workspace/playbooks/_template.md:ro
  - /mnt/agent-data/hermes/shared/agent-command-center:/workspace/agent-command-center:rw