See your hats
What hats does my org have?
Ask which hats exist and what each is for, then list them and read one in full.
What you get: every hat in your organisation, what it is for, and which ones need your yes before Quox can wear them.
Ask Quox
Section titled “Ask Quox”Ask in plain words:
what hats are there
▤ AOCL │ L1 identity complete · allowed · 0ms
▤ AOCL │ L3 policy gate complete · proceed · 5ms
◐ HAT │ catalogue ✔ HAT │ catalogue │ 5 other hats · 1.4s
⛓ AEE │ envelope opened · stream_success
There are six hats. I'm on Default now. Hat Default (active) What it's for General conversation, discovery and delegation. It also has two loadable… Privileged No Hat Assistant What it's for Personal organisation: InboxQ email, approvals, notifications, memory, n… Privileged No Hat DevOps What it's for Infrastructure diagnosis and controlled change: SSH, Docker, Proxmox, wo… Privileged Yes, needs user confirmation Hat Marketing What it's for Research, content preparation and governed publishing: SEO, screen captu… Privileged No Hat NSOC What it's for Network and security operations: audit, evidence, governance, compliance… Privileged Yes, needs user confirmation Hat Proof 657 Restrictive What it's for A test hat for a restrictive-narrowing proof. It only carries fleet stat… Privileged No I can't switch hats myself. I can propose a switch to whichever one suits what you're doing. On any hat, I only get the tools my own grant allows, so a hat's tool list is membership and not permission.
19.1s · 1 tool · 0 approvals
quox.✔ Machine verified against the CLI on 14 Oct 2026 · test report mv8muc
Quox read the hat catalogue for your organisation, said which hat it was wearing, and marked the privileged ones.
Do it yourself
Section titled “Do it yourself”1. List the hats
Section titled “1. List the hats”quox hat listKey Name Rev Status Template Mode Privileged Tools (explicit + bundled) IDassistant Assistant 19 preview v20 permissive no 7 + 60 in 7 bundle(s) 01K3Q9…default Default 7 preview v10 (template v20 available) permissive no 15 + 3 in 2 bundle(s) 01K3Q9…devops DevOps 19 preview v20 permissive yes 8 + 56 in 4 bundle(s) 01K3Q9…marketing Marketing 19 preview v20 permissive no 6 + 22 in 3 bundle(s) 01K3Q9…nsoc NSOC 19 preview v20 permissive yes 7 + 31 in 5 bundle(s) 01K3Q9…proof-657-restrictive Proof 657 Restrictive 1 preview custom restrictive no 4 + 0 in 0 bundle(s) 01K3UAK6EDRTN5BW43E67J4MYTEnforcement: enforce · selection: automatic · org default: built-in Default- Privileged:
yesmeans Quox has to ask you before it switches to that hat. - Tools: tools the hat always carries, plus tools in bundles it loads only when a conversation needs them.
- Rev: the hat’s revision. Every edit makes a new one.
2. Read one hat
Section titled “2. Read one hat”quox hat show defaultDefault (default) 01K3Q9…General conversation with discovery and delegation; reaches every capability without carrying every tool. Revision: 7 (current)Status: previewTemplate: v10 (template v20 available)Mode: permissiveEnforcement: enforce (org)Transitions: confirm=none privileged=no Explicit tools (15):hat_catalogue, hat_load_bundle, hat_propose_switch, delegate_to_agent, memory_search, memory_save, create_inbox_item, fleet_status, metrics_query, contacts_search, contacts_resolve, contacts_best_channel, contacts_record_objection, contacts_timeline, brain_saveBundles (2, loaded per conversation with hat_load_bundle):notify: send_notificationcontacts: contacts_dial, contacts_sendThe full output ends with the hat’s revision history: who changed it, when and why.
What just happened
Section titled “What just happened”Quox read the hats on your own Quox, with your permissions. Reading changes nothing, so no approval was needed. A hat says which tools a conversation carries; what an agent may actually do still comes from its own grant.
Check it yourself
Section titled “Check it yourself”quox hat show <hat> lists every revision of a hat, so you can see each change to its tools and the reason given for it.