{"repo":"NousResearch/hermes-agent","public_id":"128524","display_label":"Restricting agent model selection and config changes via allowlist","summary":"The members relate to an agent allegedly using cloud models outside a user's allowlist, a proposed hard `security.model_allowlist` setting to bound model choices, and a CLI change to refuse config writes launched from an agent session. They appear to be adjacent, with the bug report as the motivating concern and the others as possible safeguards, though the titles alone don't confirm that link.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":128524,"title":"[Bug]: Agent bypassed user's hard model allowlist, charged user's credit for unauthorized cloud models","url":null,"state":"open"},{"kind":"pr","number":128665,"title":"feat(config): hard security.model_allowlist bounding every model Hermes picks for itself","url":null,"state":"closed","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":136833,"title":"fix(cli): refuse config writes launched from an agent session","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}