Status on that issue. hermes update --help was blocked. The agent then ran hermes config set approvals.single_query_mode approve, and hermes update ran.