NousResearch/hermes-agent

Suppress false-positive lookalike TLD warnings for .app/.dev

Cluster 24461. Data as of 2026-10-24 20:38 UTC

Nothing open on GitHub. Fix merged in #28106 on 18 May 2026. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 4 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #28106. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this resolved, deciding PR #28106. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #28106, then check it covers your case.

Read #28106 Pick up a Lab task

These issues and fixes address Tirith security scanner incorrectly flagging legitimate .app and .dev top-level domains as lookalike TLD threats. The work focuses on suppressing these false-positive warnings for known benign gTLDs.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#28106 fix(tirith): suppress .app lookalike_tld false positives in warn verdicts

merged to main

files: tests/tools/test_tirith_security.py, tools/tirith_security.py

2 PRs closed without merging

From the close comments: merged via another change 2

#24562 fix(security): suppress false-positive Tirith lookalike_tld warning for benign gTLD · merged via another change → fae0fa4, #24569, #28106
#24569 fix(tirith): suppress .app lookalike_tld false positives in warn verdicts · merged via another change → fae0fa4, #28106

Closed issues · 1

Closed#24461Tirith security wrapper warns on legitimate .app domains

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Merged PRs: #28106
Closed issues: 1
Attempts: 2 PRs closed without merging
Fix link checked: 18 May 2026

For your agent

The same facts, typed.

cluster/24461.json
cluster/24461.md