miniblog.

I asked Hermes Agent to change how it set thread titles, and it patched its own source code! Self modifying code is hard to reason about even in a deterministic environment. I'd already limited Hermes access to the todoist API and web search out of an abundance of caution.