One core agent, separate hats with hard walls.
Run one Hermes gateway, then route each approved Slack channel into an isolated project profile, workspace, repository, knowledge base, tool policy, and secret set. Marketing cannot see engineering secrets. Engineering cannot publish or spend without the right approval.