# NousResearch/hermes-agent · Kanban worker write root scoping bug fix

## Open now

- 1 issue, 2 PRs open on GitHub.
- #70688: \[Bug\] Dispatcher-spawned kanban workers inherit the deployment-wide HERMES_WRITE_SAFE_ROOT instead of a task-workspace-scoped one
- PR #76317: fix(kanban): scope worker file writes to task workspace (#70688)
- PR #111168: fix(kanban): pin write_safe_root to task workspace and profile scope

A bug caused dispatcher-spawned kanban workers to inherit a deployment-wide write root instead of a task-workspace-scoped one. The fixes scope file write permissions to the individual task workspace and profile.

## TL;DR

- 3 member(s): 1 open issue(s), 0 closed issue(s), 2 open PR(s), 0 merged PR(s), 0 PR(s) closed without merging.
- No fix has been merged to main; one or more PRs were attempted (see below).
- **Recommended:** review the prior/competing PR(s) below. A fix was attempted but not merged; your case may extend or revive that work.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `unresolved`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Open related issues

- #70688: \[Bug\] Dispatcher-spawned kanban workers inherit the deployment-wide HERMES_WRITE_SAFE_ROOT instead of a task-workspace-scoped one

## Prior & competing PRs

- **#76317: fix(kanban): scope worker file writes to task workspace (#70688)**. open
  - maintainer direction: category `partial_fix`; implication `needs_llm`; refs `a0ea53f13a94`, `#70688`, `#76317`, `#374151`
  - files: `agent/delegation_context.py`, `hermes_cli/env_loader.py`, `hermes_cli/kanban_db.py`, `tests/conftest.py`, `tests/hermes_cli/test_kanban_worker_terminal_cwd.py`, `tests/hermes_cli/test_update_eol_churn.py`, `website/docs/user-guide/features/kanban-worker-lanes.md`, `website/docs/user-guide/security.md`
- **#111168: fix(kanban): pin write_safe_root to task workspace and profile scope**. open
  - maintainer direction: category `uncategorized`; implication `needs_llm`; refs `#76317`, `#70688`
  - files: `agent/delegation_context.py`, `agent/file_safety.py`, `gateway/run.py`, `hermes_cli/env_loader.py`, `hermes_cli/kanban_db_dispatch.py`, `tests/conftest.py`, `tests/hermes_cli/test_kanban_worker_terminal_cwd.py`, `tests/tools/test_write_safe_root_profile_isolation.py`, `tests/tools/test_write_safe_root_profile_matrix.py`, `tests/tui_gateway/test_write_safe_root_profile_desktop.py`, `tools/write_safe_root_scope.py`, `tui_gateway/model_switch.py`, `tui_gateway/prompt_turn.py`, `website/docs/user-guide/features/kanban-worker-lanes.md`, `website/docs/user-guide/security.md`

## Fix status

- No merged fix on record.
- Subsystem: `cron`