{"repo":"NousResearch/hermes-agent","public_id":"10376","display_label":"Profile isolation scope and file-tool boundaries","summary":"These items address gaps in profile isolation, including cross-profile read/write access, a write guard refactor, and stricter host file-tool scoping. The work centers on tightening boundaries between profiles for both memory and file operations.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":97165,"merged_at":"2026-08-28T13:36:23+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-08-28T13:36:23+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":10376,"pr_number":97165,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-08-28T13:36:23+00:00"}],"members":[{"kind":"issue","number":10376,"title":"Profile isolation is incomplete: --clone copies memory, and agents can read across profile boundaries","url":null,"state":"open"},{"kind":"pr","number":77605,"title":"fix(profiles): add strict host file-tool scope","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#97165","number":97165}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":97165,"title":"refactor(profiles): retire the cross-profile write guard (−83 tok/call from patch + write_file)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/file_safety.py","agent/system_prompt.py","tests/agent/test_file_safety_cross_profile.py","tests/tools/test_cross_profile_guard.py","tools/code_execution_tool.py","tools/file_tools.py","tools/skill_manager_tool.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}