{"repo":"NousResearch/hermes-agent","public_id":"70838","display_label":"False-positive blocks on $() substitutions in strings","summary":"These items address a parsing issue where command substitutions like $() inside double-quoted strings were incorrectly flagged as malformed or dangerous payloads. Fixes target the approval and hardline guard logic responsible for the misparsing.","subsystem":"agent","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":110990,"merged_at":"2026-09-14T16:19:26+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-09-14T16:19:26+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":70838,"pr_number":110990,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-09-14T16:19:26+00:00"},{"issue_number":96776,"pr_number":110990,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-14T16:19:26+00:00"}],"members":[{"kind":"issue","number":70838,"title":"[Bug]: hardline guard false-positives on $(grep/rg/sort ...) inside double quotes — benign commands blocked as 'malformed executable payload'","url":null,"state":"open"},{"kind":"pr","number":70839,"title":"fix(approval): stop misparsing $() substitutions as malformed payloads","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"e383c28d2ffc","number":0},{"kind":"pr","value":"#110990","number":110990}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":70880,"title":"fix(hardline): prevent false-positive on substitution inside double quotes (#70838)","url":null,"state":"open","close_reason":{"refs":[{"kind":"pr","value":"#70839","number":70839}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":110990,"title":"fix(approval): escaped quotes in grep patterns no longer hardline-blocked, and no longer hide a following hardline command (#96776, salvage #85922)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["tests/tools/test_hardline_escaped_quote_state.py","tools/approval_detection.py","website/docs/user-guide/security.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}