NousResearch/hermes-agent

macOS ad-hoc signing fallback when identity unavailable

Cluster 121857. Data as of 2026-10-27 11:58 UTC

Nothing open on GitHub. Fix merged in #127225 on 30 Sep 2026. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 3 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #127225. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this resolved, deciding PR #127225. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #127225, then check it covers your case.

Read #127225 Pick up a Lab task

These items address a macOS desktop signing scenario where the configured signing identity cannot be used, implementing a fallback to identifier-pinned ad-hoc signing rather than cdhash-only or publisher-signing downgrade. The work also covers policy-aware re-signing and framework entitlements handling.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#127225 fix(desktop): policy-aware macOS re-signing — framework entitlements, pinned ad-hoc fallback, no publisher-signing downgrade

merged to main

files: hermes_cli/main_desktop.py, tests/fixtures/resolution_allowlist.json, tests/hermes_cli/test_desktop_install_after_update.py, tests/hermes_cli/test_gui_command.py

1 PR closed without merging

From the close comments: done elsewhere 1

#121958 fix(desktop): pin ad-hoc signing when the macOS identity fails · done elsewhere → #127225

Closed issues · 1

Closed#121857macOS Desktop: when the configured signing identity can't be used (e.g. update over SSH), fall back to identifier-pinned ad-hoc signing instead of cdhash-only

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs: #127225
Closed issues: 1
Attempts: 1 PR closed without merging
Fix link checked: 30 Sep 2026

For your agent

The same facts, typed.

cluster/121857.json
cluster/121857.md