NousResearch/hermes-agent

distribution_owned allowlist not enforced in copy/update

Cluster 74373 · hermes cli. Data as of 2026-10-23 11:54 UTC

Nothing open on GitHub. Fix merged in #75888. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 5 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #75888. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this resolved, deciding PR #75888. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #75888, then check it covers your case.

Read #75888 Pick up a Lab task

These issues and PRs concern a bug where the distribution_owned field was not being respected as an allowlist during profile distribution copy and update operations. Multiple fixes target _copy_dist_payload and related paths to enforce this constraint.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#75888 fix(gateway): /model off the event loop; distribution allowlist enforced; hindsight env file 0600

merged to main

files: gateway/slash_commands.py, hermes_cli/model_switch.py, hermes_cli/profile_distribution.py, plugins/memory/hindsight/__init__.py, tests/gateway/test_model_command_context_offload.py, tests/hermes_cli/test_model_switch_context_offload.py, tests/hermes_cli/test_profile_distribution.py, tests/plugins/memory/test_hindsight_env_perms.py

3 PRs closed without merging

From the close comments: done elsewhere 1 · duplicate 1 · merged via another change 1

#74409 fix(profiles): enforce distribution_owned as the actual install/update allowlist · done elsewhere → #75351
#74414 fix(distribution): respect distribution_owned allowlist in _copy_dist_payload (#74373) · merged via another change → #75888, #74373
#74498 fix(profile): respect distribution_owned in _copy_dist_payload · duplicate → #74414, #74409

Closed issues · 1

Closed#74373`distribution_owned` does not constrain profile distribution copy/update payload

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.40: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: hermes cli
Merged PRs: #75888
Closed issues: 1
Attempts: 3 PRs closed without merging
Fix link checked: 1 Aug 2026

For your agent

The same facts, typed.

cluster/74373.json
cluster/74373.md