Blocking destructive disk-wipe commands on raw devices

NousResearch/hermes-agent · cluster 102371 · agent

Data as of

4 open items. Fix attempted, not merged.

The short answer

1open issue
3open PRs
5items grouped
Known?
Yes. 5 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 3 PRs.

These issues and PRs concern a gap in safety coverage for commands like shred, wipefs, and blkdiscard when run against raw block devices, and proposed fixes to add approval or hardline restrictions for such operations.

Open issues1

  • Issue#102371[Bug]: shred/wipefs/blkdiscard on block devices have zero hardline/dangerous coverage (silent disk destruction)

Open PRs3

  • PR#102376fix(approval): block shred/wipefs/blkdiscard on raw block devices
  • PR#105607fix(security): hardline floor covers macOS disks and disk-wipe tools
  • PR#129618fix(approval): gate shred/wipefs/blkdiscard on raw block devices

1 PR closed without merging

From the close comments: duplicate 1

  • #102377 fix(approval): block shred wipefs blkdiscard on raw block devices · duplicate → #102376, #102371
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.40: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
1 PR closed without merging

For your agent

The same facts, typed.