Give Hermes a task to delegate to Codex. Tool activity streams in live, and risky commands stop at the approval gate until you allow them.