Every tool call your agent makes, recorded locally before it runs — with a 0–100 posture score and an honest list of what it can't see.

If you run an AI agent on your own machine, you already trust it with a lot. It edits files, restarts services, pushes to GitHub. agent-ledger answers two questions about that arrangement: what did my agent actually do, and how risky is its behavior?

It's a free, open-source (MIT) plugin for Hermes Agent, and it works in two layers.

Layer 1: the ledger

The plugin hooks pre_tool_call and writes an entry to a local SQLite database before the tool executes. When the call completes, the entry is confirmed. Anything issued but never confirmed becomes a ghost — a tool call the agent believed it made, with no evidence it happened.…