{
 "batch": "final-05",
 "ranking": [
  {
   "rank": 1,
   "pr": 153714,
   "name": "tenure",
   "total": 29,
   "why": "Hook-driven approval ledger that earns or revokes autonomy per action type through Hermes's own approval gate, fails closed, ships ~760 tests, Desktop page and CLI; it changes how the user's agent is trusted in a way only a plugin can."
  },
  {
   "rank": 2,
   "pr": 150556,
   "name": "hermes-ui-cards",
   "total": 28,
   "why": "Adds 17 schema-validated interactive cards to Hermes Desktop chat with text fallbacks elsewhere, readable build sources, Python/JS parity tests and screenshots; a broadly useful Desktop upgrade many users would keep."
  },
  {
   "rank": 3,
   "pr": 150251,
   "name": "gemini-live",
   "total": 27,
   "why": "Full-duplex Gemini Live voice calls in Desktop with the key read from Hermes's secret store and minted into ephemeral tokens, delegating to Hermes and gated read-only shell; strong, but depends on Google and an upstream Desktop patch."
  },
  {
   "rank": 4,
   "pr": 150644,
   "name": "hermes-canvas",
   "total": 27,
   "why": "A live Desktop canvas whose box status comes from real writes and exit codes in hooks, with user edits reaching the agent mid-turn and pre_verify holding 'done'; creative and well tested, though its veto fails open on plugin errors."
  },
  {
   "rank": 5,
   "pr": 152458,
   "name": "housemate",
   "total": 27,
   "why": "Platform adapter and Piper TTS provider that turns old phones and browsers into room speakers over a LAN hub with tap-only approval for flagged commands, squarely Hermes-on-your-own-hardware; the open LAN server and NC wake-word models narrow it."
  },
  {
   "rank": 6,
   "pr": 150596,
   "name": "ariadne",
   "total": 27,
   "why": "Records and replays Hermes sessions offline through llm/tool middleware to catch regressions, compare installs and bisect Hermes commits, with a Desktop page and a real upstream finding; excellent, but mainly for Hermes developers."
  },
  {
   "rank": 7,
   "pr": 149640,
   "name": "hermes-ark",
   "total": 26,
   "why": "Encrypted, deduplicated snapshots of memory and skills before every write, with passphrase and S3 keys from Hermes's secret store, previewed restores and self-defense against pruning; day-one useful though backup is a familiar idea."
  },
  {
   "rank": 8,
   "pr": 151887,
   "name": "cmi",
   "total": 26,
   "why": "Replaces Hermes's context engine with recallable digests of old tool results, using Hermes's credential pool; a deep change to Hermes, but the repo sprawls into a proxy and two extra plugins with a thin manifest."
  },
  {
   "rank": 9,
   "pr": 150840,
   "name": "kata",
   "total": 26,
   "why": "Mines repeated tool routines across sessions and, after /kata approve, registers them as real deterministic tools with per-call approval for external steps; changes the agent's toolset but leans on internal Hermes modules."
  },
  {
   "rank": 10,
   "pr": 152651,
   "name": "workroom",
   "total": 26,
   "why": "Links figures in Word, PowerPoint and Excel to source cells and stages human-approved releases with 31 tools, guards and a Desktop panel; very polished and safe, but a Windows-centric niche of document work."
  },
  {
   "rank": 11,
   "pr": 152691,
   "name": "grimoire",
   "total": 25,
   "why": "Locked-down DuckDB data tools with automatic file attach, raw-read blocking and a check line tracing reply numbers to queries, plus a Data page; useful and careful, tested only by one selftest script."
  },
  {
   "rank": 12,
   "pr": 153844,
   "name": "fine-print",
   "total": 25,
   "why": "Detects Hermes's silent cut-offs (truncated pages, downscaled or dropped images, capped searches) through 11 hooks and tells user and model; honest and well tested, but niche and pinned to Hermes v0.23 output formats."
  },
  {
   "rank": 13,
   "pr": 153955,
   "name": "shadow",
   "total": 25,
   "why": "Blind, both-order paired replays of your own turns on a candidate model with a sign test and staged switch-over with rollback; clever and budget-capped, but relies heavily on private Hermes internals that will break on update."
  },
  {
   "rank": 14,
   "pr": 150800,
   "name": "hypnos",
   "total": 25,
   "why": "Nightly LoRA training on the user's approvals and corrections with an exam gate and llm_execution routing to the local brain; the most novel change to Hermes's model here, but heavy GPU/torch setup and unverified results."
  },
  {
   "rank": 15,
   "pr": 150353,
   "name": "fluent",
   "total": 24,
   "why": "Builds command cards from a program's help and man pages and blocks nonexistent terminal options with suggestions, routing destructive subcommands to Hermes approval; solid and safe, a modest extension of the agent."
  },
  {
   "rank": 16,
   "pr": 149738,
   "name": "trust-ladder",
   "total": 24,
   "why": "Turns user corrections into enforced rules at four levels, installing model-written guards only after they match the mistake and spare the fix; thoughtful, but the README install line is a placeholder and there are no screenshots."
  },
  {
   "rank": 17,
   "pr": 153851,
   "name": "foreman",
   "total": 24,
   "why": "Rule-based gate on commits, pushes and PRs that blocks weakened tests and committed secrets and keeps merges human-only; reliable but a familiar idea, and the repo root is cluttered with working documents."
  },
  {
   "rank": 18,
   "pr": 153020,
   "name": "breadcrumbs",
   "total": 24,
   "why": "Append-only memory provider and context engine with leveled recall, slots and sharing; it truly changes Hermes memory, but the README is sprawling and /island PATH clones profile keys without the prompt."
  },
  {
   "rank": 19,
   "pr": 152908,
   "name": "contract-necromancer",
   "total": 23,
   "why": "Locks a project's tests by hash and makes pre_verify run them before Hermes may claim done, with a checkable receipt; reliable and well tested, but narrow and overlapping other test-gate plugins."
  },
  {
   "rank": 20,
   "pr": 153809,
   "name": "living-spaces",
   "total": 23,
   "why": "Agent-built sandboxed mini-apps in a Desktop tab kept fresh by cron, but it uses private cron modules and the raw Desktop bridge, forwards cookies and auth headers by default, and stores Space credentials outside the secret store."
  }
 ]
}