The spending policy

Before any review opens, Hermit checks the move against a few limits. They’re kept and checked on your device. A move that breaks one never gets a review, so there’s nothing to approve by mistake.

Rules for everyone

The daily limit is $500 by default. It’s a rolling 24 hours, not a reset at midnight: a $200 swap at 3pm counts until 3pm tomorrow. Sends, swaps, Spot buys, Aave deposits, web app transactions and the assistant’s trades all count when Hermit can put a dollar price on them. Over the limit, you see “Over your daily limit: $40 of $500 left today.”

The first time money goes to an address this device has never paid, the review warns you: “First payment to 0x8c3F…6c51. Check it character by character.” The warning goes away once a payment to that address has confirmed.

If Hermit has no price for a token you send yourself, it tells you on the review (“Not counted toward daily limit”) and lets you decide.

Extra rules for the assistant

These apply to anything the assistant prepares in chat, from the on-device model or Private Cloud, and to automations, which run the same assistant.

Rule	What the assistant tells you when it stops
Up to $100 per move	“The assistant can prepare up to $100 per move. Open Swap yourself for more.”
No tokens without a price	“The assistant can’t move tokens without a price. Open Swap yourself.”
Swap output only to your own addresses	“The assistant can only send swap output to your own addresses.”
No swap that loses more than 10% of its value	The loss in dollars, like “You get about $88.00 for $100.00, a loss of 12.0%.”
Hyperliquid margin counts	“The assistant can prepare up to $100 of margin per trade. Open Trade yourself for more.”

A swap that loses more than 3% still gets prepared, with that loss line as a warning on the review. A send the assistant prepares also has to go to an address you typed in the chat yourself. That rule is on prompt injection.

You type

Swap 500 USDC on Base to NEAR

You see

It won’t prepare this one: “The assistant can prepare up to $100 per move. Open Swap yourself for more.” Your own swaps only have to fit the daily limit.

You type

Swap 50 USDC on Base to NEAR

You see

• Preparing the swap for your review

The Swap screen opens filled in. $50 counts toward your daily limit once you approve it.

Changing the limits

The two limits live in two places.

The daily limit

1. Open Settings, then the Safety tab.

2. Next to Daily limit, pick an amount: $100, $250, $500, $1,000, $2,000, $5,000 or $10,000.

3. Lowering it saves at once. Raising it asks for Face ID (Touch ID on a Mac) first, with “Raise your daily limit to $1,000”. If you cancel, you see “Not confirmed, so the limit stays $500”.

On a device with no passcode set, Hermit won’t raise the limit at all. It asks you to set one first.

The assistant’s cap

1. Open Wallets, pick a wallet, then the Security tab.

2. In the Spending policy card, next to Assistant cap, tap $25, $100 or $250.

The same card shows your daily limit, what’s left today, and the two fixed rules: the assistant pays out to “Your own addresses only”, and a new address is “Warned before Approve”.

What it doesn’t cover

• Orders you place yourself on the Trade page don’t count toward the daily limit. Only Hyperliquid trades the assistant prepares do.
• A token with no price that you send yourself gets the warning above, not a block.
• It can’t stop someone who has your phone and knows your passcode. Face ID falls back to the passcode, so they could approve moves and raise the limit. Keep your passcode to yourself.
• Each iPhone or Mac keeps its own count and its own settings. A send on your Mac doesn’t use up your iPhone’s limit.

Mainnet

It’s mainnet: real swaps move real money. The limits cut how much a mistake can cost. They don’t make a bad move safe.