{"repo":"NousResearch/hermes-agent","public_id":"140290","display_label":"Gateway frozen config stamp scope mismatch handling","summary":"The members appear to share one theme: how the gateway's frozen config stamp is scoped and validated, including a local session ending on a scope mismatch when a non-secret field changes. Two are fix PRs, one covering per-fingerprint recovery of a stale whole-policy stamp and the other binding frozen secrets to endpoints identified by lookup, and one is an issue report; their outcomes are not established here.","subsystem":"gateway","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":140488,"merged_at":"2026-10-17T15:26:40+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-10-17T15:26:40+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":140290,"pr_number":140488,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-10-17T15:26:40+00:00"}],"members":[{"kind":"issue","number":140290,"title":"Local session dies on scope mismatch when a non-secret frozen field changes, and /model cannot re-stamp it","url":null,"state":"open"},{"kind":"pr","number":140303,"title":"fix(gateway): recover a stale whole-policy config stamp per fingerprint","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#140488","number":140488}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":140488,"title":"fix(gateway): bind frozen config secrets to their resolved endpoints, not the whole policy (CFG-10, #140290)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["gateway/session_policy_credentials.py","tests/gateway/test_config_policy_recovery.py","tests/gateway/test_config_secret_scope.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}