{"repo":"NousResearch/hermes-agent","public_id":"29866","display_label":"Repair missing certifi CA bundle after updates","summary":"These members concern a problem where upgrading (e.g. via brew) leaves certifi's cacert.pem missing in the virtual environment, breaking SSL for multiple services. The proposed fixes involve detecting and restoring the missing CA bundle through existing repair infrastructure.","subsystem":"gateway","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":71010,"merged_at":"2026-07-24T22:53:39+00:00"},"resolution":{"state":"resolved","by":"pr-71010"},"freshness":{"state":"verified","last_verified_at":"2026-07-24T22:53:39+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":29866,"pr_number":71010,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-07-24T22:53:39+00:00"}],"members":[{"kind":"issue","number":29866,"title":"brew upgrade breaks certifi (cacert.pem missing in venv) - Feishu/Telegram/WeChat all fail","url":null,"state":"closed"},{"kind":"pr","number":68389,"title":"fix(update): repair missing certifi CA bundles after updates","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#71010","number":71010},{"kind":"pr","value":"#29866","number":29866}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":71010,"title":"fix(ssl): detect and repair a missing certifi cacert.pem via existing venv-repair infra","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["agent/ssl_guard.py","hermes_cli/_early_recovery.py","hermes_cli/doctor.py","hermes_cli/main.py","tests/hermes_cli/test_certifi_repair.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}