Keeping Agent Credentials Inside the Right Runtime

An agent platform must keep credentials and runtime access scoped to the correct account. A shared public container endpoint without ownership checks would make tenant isolation impossible.

MyHermes routes signed user requests through an authenticated gateway to the container assigned to that user. Runtime ports are blocked from public access, Docker control uses mutual TLS, and submitted model credentials are saved inside the user's Hermes runtime without being returned to the browser.