{"repo":"NousResearch/hermes-agent","public_id":"45291","display_label":"File tool access control and path allowlisting","summary":"These items concern adding user-configurable allowlists or whitelists to restrict which filesystem paths Hermes file tools can access. The underlying concern is that host-side file tools currently lack access control boundaries.","subsystem":"agent","counts":{"members":3,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":2,"merged_prs":0,"attempt_prs":0},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"LLM_ONLY","link_density":0.36000000000000004},"fix_edges":[],"members":[{"kind":"issue","number":45291,"title":"[Feature]: User-configurable file access whitelist for Hermes file tools","url":null,"state":"open"},{"kind":"issue","number":48344,"title":"Filesystem path allowlist for file tools","url":null,"state":"closed"},{"kind":"issue","number":50687,"title":"Security: Host-side file tools lack access control — attack surface left open by sandbox architecture","url":null,"state":"closed"}],"trust":{"default_tier":"verified","includes_suggested":false}}