# NousResearch/hermes-agent · Profile-scoped child run and mirror isolation in gateway

## Open now

- 0 issues, 1 PR open on GitHub.
- PR #120282: fix(tui_gateway): scope child-run registry and live mirror to the owning profile

These items address scoping child run registries and live mirrors to their owning profile in the multiplexed gateway, with attention to preventing cross-profile data leakage. The work involves session lifecycle path binding and partitioning active runs by profile.

## TL;DR

- 3 member(s): 0 open issue(s), 1 closed issue(s), 1 open PR(s), 1 merged PR(s), 0 PR(s) closed without merging.
- A fix was merged to main in PR #126157. Verify it addresses your case.
- **Recommended:** read PR #126157 (and any competing PRs below) before filing. Confirm the merged change covers your symptom.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `resolved` · deciding PR(s): `pr-126157`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Closed / duplicate issues

- #120212: security(gateway): partition active child runs by profile to prevent cross-profile mirror eavesdropping

## Prior & competing PRs

- **#126157: Multiplexed gateway: session lifecycle paths bind to the routed profile's home, not the launch profile (#123584 #123618 #123989 #118233 #118862 #101134 #119121 #120212)**. merged to main · fix tier `verified`
  - maintainer direction: category `merged`
  - files: `contributors/emails/[redacted:email]`, `gateway/platforms/api_server.py`, `gateway/platforms/api_server_openai_routes.py`, `gateway/platforms/base.py`, `gateway/run.py`, `gateway/run_inbound.py`, `gateway/run_notifications.py`, `gateway/run_shutdown.py`, `gateway/run_turn_runner.py`, `gateway/session_db_recovery.py`, `gateway/session_lifecycle.py`, `hermes_state_gateway.py`, `tests/gateway/test_api_server.py`, `tests/gateway/test_inbound_media_profile_scope.py`, `tests/gateway/test_multiplex_notice_egress_profile_adapter.py`, `tests/gateway/test_multiplex_session_db_profile_scope.py`, `tests/gateway/test_planned_restart_notice_multiplex.py`, `tests/gateway/test_profile_spool_recovery.py`, `tests/gateway/test_session_db_handle_sharing.py`, `tests/hermes_state/test_hermes_state.py` (+18 more)
- **#120282: fix(tui_gateway): scope child-run registry and live mirror to the owning profile**. open
  - maintainer direction: category `implemented_elsewhere`; implication `superseded`
  - files: `tests/tui_gateway/test_resume_child_run_profile_scope.py`, `tests/tui_gateway/test_resume_live_profile_scope.py`, `tests/tui_gateway/test_session_resume_db_ownership.py`, `tests/tui_gateway/test_subagent_child_mirror.py`, `tests/tui_gateway/test_subagent_mirror_profile_isolation.py`, `tui_gateway/agent_callbacks.py`, `tui_gateway/methods_prompt.py`, `tui_gateway/methods_session.py`, `tui_gateway/server.py`, `tui_gateway/tool_progress.py`

## Fix status

- Merged to main in PR #126157 (cited above). No release data is tracked. Verify downstream.
- Fix last verified (merged) `2026-09-28`.
- Subsystem: `gateway`