Cairn

Prevent redacted secret placeholders from being persisted

NousResearch/hermes-agent · cluster 30962 · agent

Data as of

5 open items. Fix attempted, not merged.

The short answer

2open issues
3open PRs
6items grouped
Known?
Yes. 6 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
2 issues and 3 PRs.

These issues and fixes address a shared problem: redacted credential placeholders (e.g. masked secret values) could be accidentally written to files or saved to config, potentially corrupting secrets or breaking connectivity. The work focuses on adding validation to reject such placeholders at input boundaries.

Open issues2

  • Issue#30962Patch tool can fail or corrupt secrets when old_string is copied from redacted file output
  • Issue#42727[Bug]: agent-led self-configuration can persist redacted credentials and break gateway connectivity

Open PRs3

  • PR#31003fix(tools): reject redacted-secret placeholders in write_file / patch input (#30962)
  • PR#42748fix(config): refuse to persist redacted secret placeholders via config set
  • PR#70454fix(config): reject redacted credential placeholders

1 PR closed without merging

From the close comments: superseded by another PR 1

  • #42746 fix(config): reject redacted credential placeholders · superseded by another PR
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.29: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/30962.json
cluster/30962.md