{"repo":"NousResearch/hermes-agent","public_id":"113421","display_label":"Guard config.yaml mutations from execute_code tool","summary":"These issues and PRs address a bug where execute_code could silently mutate the protected config.yaml, bypassing the write guard enforced by other tools like write_file and patch. The work focuses on detecting and loudly failing on such runtime config mutations.","subsystem":"agent","counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":3,"closed_issues":1,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":113421,"title":"[Bug]: execute_code bypasses the config.yaml write guard that write_file/patch enforce","url":null,"state":"closed"},{"kind":"pr","number":113450,"title":"fix(tools): fail loudly when execute_code rewrites the protected config","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":113458,"title":"fix(approval): detect runtime config mutations safely","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"292803c3058bef7658020e73c56cf605051865dc","number":0},{"kind":"commit","value":"4716ec0ba4e212105f8f162c226f052b25f8a76b","number":0},{"kind":"commit","value":"5910de20bc9839fdd36e791a9d72ba2c2e722f66","number":0},{"kind":"commit","value":"3e3e04cce36d51b270bb094a784799b3c3c7e2ac","number":0},{"kind":"pr","value":"#113421","number":113421},{"kind":"pr","value":"#113459","number":113459},{"kind":"pr","value":"#49578","number":49578},{"kind":"pr","value":"#65592","number":65592},{"kind":"pr","value":"#113450","number":113450},{"kind":"pr","value":"#113458","number":113458}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":113459,"title":"fix(tools): execute_code fails loudly when the cell mutates config.yaml (#113421)","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#113450","number":113450},{"kind":"pr","value":"#113421","number":113421},{"kind":"pr","value":"#113458","number":113458}],"category":"duplicate_of","implication":"duplicate"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}