github-backup/docs/04-connector-risk-register.md

Edit Back to List

Connector Risk Register

Rule

Every connector starts read-only, narrow and logged. Write access comes later through an approval flow.

Every connector also needs a memory-filter rule. The first question is not "can Hermes store this?" but "what business meaning should be digested from this, and where does the raw source already live?"

Preferred Tools

Connector Order

Rank Connector First safe use Risk Gate
1 Fathom Import approved call digests and source receipts Personal/client data Manual digest first
2 Calendar Read-only daily context Location/timing/privacy No event creation
3 Slack int-agentops internal channel Accidental messages Draft/review first
4 Airtable Read-only selected views Business records View-level scope
5 Notion Migration/export reference Incomplete/stale docs Treat as context, not truth
6 GitHub Read-only project context Code changes PR-only writes
7 n8n Approval queue Workflow side effects Human approvals
8 Gmail Draft-only later High trust and privacy risk No send permission
9 Ads platforms Reporting only much later Money/spend risk No write access
10 Finance/legal tools Avoid initially High consequence Manual only
11 Google Drive Link and digest selected creative/source assets Bulk files, privacy, disk bloat Links and digests first

Slack Plan

Initial:

Later:

Never early:

Fathom Plan

Initial:

Later:

Never early:

Google Drive Plan

Initial:

Later:

Never early:

Airtable Plan

Initial:

Later:

Never early:

Notion Plan

Initial:

Later:

Never early: