diff --git a/platform-engineer/deployment.yaml b/platform-engineer/deployment.yaml
index 1d7ed41..f84c7b9 100644
--- a/platform-engineer/deployment.yaml
+++ b/platform-engineer/deployment.yaml
@@ -91,7 +91,11 @@ spec:
       - name: hermes
         image: nousresearch/hermes-agent:latest
         imagePullPolicy: Always
-        command: ["gateway", "run"]
+        # IMPORTANT: do NOT set `command:` — it would override the image's
+        # ENTRYPOINT (/init, s6-overlay), which sets up the hermes user, seeds
+        # config on first boot, and supervises the gateway. The image's CMD
+        # (main-wrapper.sh) already routes `gateway run` through s6.
+        args: ["gateway", "run"]
         ports:
         - name: gateway
           containerPort: 8642