Add paperclip-hermes-file-access-manager

[marospekarik]

Add paperclip-hermes-file-access-manager to Hermes Atlas

Adds paperclip-hermes-file-access-manager to the Atlas registry (data/repos.json) under Plugins & Extensions.

What it is
Kernel-enforced filesystem sandboxing for Hermes Agent profiles. A Paperclip plugin that turns per-path permission rules into Docker bind mounts:

• Denied → path is not mounted into the container (doesn't exist)
• Read-Only → :ro mount, kernel-enforced, even root can't write
• Read/Write → full access

Key features

• Three permission states: Read/Write, Read-Only, Denied
• Docker bind-mount enforcement (kernel-level, not config flags)
• Inheritance: folder settings inherit downward, deeper settings override
• Sensitive-path masking: .ssh, .gnupg, .env auto-denied on broad grants
• One-click Save & Apply from Paperclip UI
• Profile-aware: per-profile and per-agent permission rules
• REST API: GET/POST /agents/:agentId/file-access, GET /scan

Metadata

• Developer: Ordillect
• License: MIT
• Tags: filesystem, security, sandboxing, docker, paperclip, hermes-agent, permissions, agent-governance, access-control

Replaces the intake issue #653.

[vercel]

Someone is attempting to deploy a commit to the Kevin's projects Team on Vercel.

A member of the Team first needs to authorize it.