Windows Smart App Control blocks Python during setup

NousResearch/hermes-agent · cluster 55004 · apps/bootstrap-installer

Data as of 2026-10-22 12:15 UTC

2 open items. Fix merged in #122924. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 5 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #122924. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this partially resolved, deciding PR #122924. That is separate from the fix event.
Still open: 2 issues and 0 PRs.

Next step: read #122924, then check whether your report is one of the 2 still open.

Read #122924 Pick up a Lab task

Multiple reports and a related fix attempt address Windows Smart App Control policies blocking embedded Python components (including the _ssl module and venv executables) during installation or bootstrapping. The issues span detection, error messaging, and setup failure behavior on Windows 11.

Open issues2

Issue#55004[Setup]: Windows installer consistently fails with "Application Control policy has blocked this file (os error 4551)" during venv setup
Issue#56554Windows install fails: "git pull failed (exit 128)" then Smart App Control blocks venv python.exe

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#122924 fix(cli): name Windows Smart App Control when it blocks the dashboard runtime

merged to main

files: hermes_cli/main.py, hermes_cli/main_dep_hints.py, tests/hermes_cli/test_smart_app_control_block.py

1 PR closed without merging

From the close comments: partial fix 1

#63810 fix(cli): detect Windows Smart App Control blocking embedded Python _ssl module · partial fix → #63796, #63810, #374151

Closed issues · 1

Closed#63796[Bug]: Hermes Desktop cannot bootstrap on Windows 11 when Smart App Control blocks embedded Python (_ssl)

How this cluster was grouped

Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
Members outside that structural core may belong to a different underlying problem.
Pairwise link density 0.31: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: apps/bootstrap-installer
Merged PRs: #122924
Closed issues: 1
Attempts: 1 PR closed without merging
Fix link checked: 25 Sep 2026

For your agent

The same facts, typed.

cluster/55004.json
cluster/55004.md