NousResearch/hermes-agent

Profile isolation scope and file-tool boundaries

Cluster 10376 · agent. Data as of 2026-10-26 12:29 UTC

1 open item. Fix merged in #97165 on 28 Aug 2026. Check it covers your case.

open issue

open PRs

items grouped

Known?: Yes. 3 related items grouped here, 0 issues already closed.
Fix event: A fix was merged to main in PR #97165. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open: 1 issue and 0 PRs.

Next step: read #97165, then check whether your report is the one still open.

Read #97165 Pick up a Lab task

These items address gaps in profile isolation, including cross-profile read/write access, a write guard refactor, and stricter host file-tool scoping. The work centers on tightening boundaries between profiles for both memory and file operations.

Open issues1

Issue#10376Profile isolation is incomplete: --clone copies memory, and agents can read across profile boundaries

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#97165 refactor(profiles): retire the cross-profile write guard (−83 tok/call from patch + write_file)

merged to main

files: agent/file_safety.py, agent/system_prompt.py, tests/agent/test_file_safety_cross_profile.py, tests/tools/test_cross_profile_guard.py, tools/code_execution_tool.py, tools/file_tools.py, tools/skill_manager_tool.py

1 PR closed without merging

From the close comments: superseded by another PR 1

#77605 fix(profiles): add strict host file-tool scope · superseded by another PR → #97165

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: agent
Merged PRs: #97165
Closed issues: 0
Attempts: 1 PR closed without merging
Fix link checked: 28 Aug 2026

For your agent

The same facts, typed.

cluster/10376.json
cluster/10376.md