Cairn
NousResearch/hermes-agent

Windows destructive command detection in approval system

Cluster 69472 · agent. Data as of

2 open items. Fix merged in #84428 on 12 Aug 2026. Check it covers your case.

The short answer

0open issues
2open PRs
4items grouped
Known?
Yes. 4 related items grouped here, 1 issue already closed.
Fix event
A fix was merged to main in PR #84428. Check it covers your case. No release data is tracked.
Tracker
The maintainers' tracker marks this resolved, deciding PR #84428. That is separate from the fix event.
Still open
0 issues and 2 PRs.

These items address a gap where the approval system did not recognize destructive PowerShell and native Windows commands or paths. The work adds Windows-specific hardline rules analogous to existing Unix-side protections.

Open issues0

No open issues.

Open PRs2

  • PR#69489fix(approval): detect native Windows destructive commands
  • PR#84563fix(security): add the Windows analogues of the shutdown/mkfs hardline rules

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

  • #84428 fix(security): approval system covers Windows destructive commands and paths

    merged to main

    files: tests/tools/test_approval_windows.py, tools/approval.py

Closed issues · 1
  • Closed#69472Bug: Approval system is blind to destructive PowerShell / Windows paths on Windows hosts
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.50: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Merged PRs
#84428
Closed issues
1
Attempts
0 PRs closed without merging
Fix link checked
12 Aug 2026

For your agent

The same facts, typed.

cluster/69472.json
cluster/69472.md