{"repo":"NousResearch/hermes-agent","public_id":"110469","display_label":"Windows start attestation correctness and fixes","summary":"These members address a bug in Windows process start attestation where PID-only checks allow stale markers or PID reuse to cause incorrect cold-start or recovery behavior, and a subsequent fix binding attestation to process identity and generation.","subsystem":null,"counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":110958,"merged_at":"2026-09-14T15:21:38+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-09-14T15:21:38+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":1.0},"fix_edges":[{"issue_number":110469,"pr_number":110958,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-09-14T15:21:38+00:00"}],"members":[{"kind":"issue","number":110469,"title":"[Bug]: Windows start attestation is PID-only — a stale marker can authorize a cold start, and PID reuse can suppress a real recovery","url":null,"state":"closed"},{"kind":"pr","number":110479,"title":"fix(gateway): bind Windows start attestation to process identity and update handoff (#110469)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"8c3a35b69d","number":0},{"kind":"pr","value":"#110958","number":110958}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":110958,"title":"Windows update cold-start: attestation is generation-bound, identity-bound and consumed only after readiness (#110020 follow-up)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["gateway/lifecycle_ledger.py","hermes_cli/gateway_windows.py","hermes_cli/update_cmd_windows.py","tests/gateway/test_lifecycle_ledger.py","tests/hermes_cli/test_gateway_start_attestation.py","tests/hermes_cli/test_update_cold_start_gateway_liveness.py","tests/hermes_cli/test_windows_gateway_cold_start_desktop_lifecycle.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}