Cairn
NousResearch/hermes-agent

Secret store path identity matching fixes

Cluster 128866 · agent. Data as of

2 open items. Fix attempted, not merged.

The short answer

1open issue
1open PR
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 1 PR.

These members address a bug where secret store checks relied on path string comparison rather than file identity, allowing case variants, hardlinks, and symlinks to bypass guards. Related work consolidates secret store lists across read/write, chat delivery, and dashboard file handling.

Open issues1

  • Issue#128866[Bug]: secret-store checks compare path spelling, so case variants, hardlinks and symlinked store dirs get through

Open PRs1

  • PR#128813fix(file-safety): one secret-store list for the read/write guard, chat delivery and dashboard Files

1 PR closed without merging

From the close comments: other 1

  • #128868 fix(file-safety): match secret stores by file identity, not path spelling · other
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/128866.json
cluster/128866.md