{"repo":"NousResearch/hermes-agent","public_id":"108451","display_label":"Optimize dangerous-command detection regex performance","summary":"These items address performance problems in approval/dangerous-command scanning, specifically preventing quadratic or GIL-starving behavior caused by unbounded regex or pipeline patterns on separator-rich or long input strings.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":108451,"title":"perf(approval): dangerous-command detection still starves the GIL for seconds on long commands after #104781","url":null,"state":"open"},{"kind":"pr","number":108485,"title":"fix(approval): bound echo|tr|shell regex to prevent O(n²) on separator-rich input","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#108451","number":108451}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":108548,"title":"fix(approvals): bound tr pipeline gaps to keep dangerous-command scan…","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#108485","number":108485}],"category":"superseded_by_pr","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}