# NousResearch/hermes-agent · Protect HERMES_HOME from unsafe write operations

## Open now

- 1 issue, 1 PR open on GitHub.
- #109367: \[Bug\]: HERMES_HOME has no hardline floor at any path — the agent's own data directory is the least protected writable path on the system
- PR #109372: fix(approval): prevent silent destruction of Hermes persisted data

These items address a security gap where HERMES_HOME lacked a minimum protection floor, leaving the agent's own data directory vulnerable to silent or unauthorized destruction. The work involves adding hardline path restrictions and approval safeguards for persisted data.

## TL;DR

- 3 member(s): 1 open issue(s), 0 closed issue(s), 1 open PR(s), 0 merged PR(s), 1 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #109367: \[Bug\]: HERMES_HOME has no hardline floor at any path — the agent's own data directory is the least protected writable path on the system

## Prior & competing PRs

- **#109372: fix(approval): prevent silent destruction of Hermes persisted data**. open
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `b9bbb9655ba4399b2a3a95010a0019f7723cf25e`, `cdb9c6bd42da62d338311011afb9a4bbffe00d89`, `5530b85e6ea994b0a28e5f0b05ff2a350fb2fd78`, `de2d6a1b93508463c31434c1ae067e204af81238`, `ad03f20dd61919ca2135d6904e787a94284aacaf`, `1c671beab29164d8931c5d01c5739502267089d8`, `d595e636c83aa0b9606d4e914e1140ae9c796897`, `#109367`, `#108250`, `#109355`
  - files: `evals/gateway_completion/delivery_lifecycle.py`, `tests/tools/test_approval.py`, `tests/tui_gateway/test_subprocess_encoding.py`, `tools/approval.py`, `tools/approval_detection.py`, `tools/terminal_tool.py`, `tools/terminal_tool_background.py`, `tui_gateway/methods_tools.py`
- **#127475: fix(security): give HERMES_HOME a hardline/dangerous floor**. closed without merge
  - maintainer direction: category `uncategorized`; implication `needs_llm`

## Fix status

- No merged fix on record.
- Subsystem: `agent`