{"repo":"NousResearch/hermes-agent","public_id":"129818","display_label":"Kanban dispatcher approval gate fail-closed fix","summary":"These items address a security behavior where the kanban dispatcher worker approval gate fails open, silently auto-approving dangerous commands instead of failing closed when no human approval is present. The work involves changing this default behavior to deny dangerous commands when the approval check cannot be satisfied.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":2,"closed_issues":0,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":129818,"title":"Kanban dispatcher workers silently auto-approve dangerous commands (gate fails open, not closed)","url":null,"state":"open"},{"kind":"pr","number":129828,"title":"fix(approval): fail closed for dangerous commands without a human","url":null,"state":"open","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":129847,"title":"fix(approvals): fail closed for kanban dispatcher workers (#129818)","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#129828","number":129828},{"kind":"pr","value":"#129828","number":129828}],"category":"uncategorized","implication":"needs_llm"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}