{"repo":"NousResearch/hermes-agent","public_id":"76037","display_label":"Fix deny rules bypassed by shell command prefixes","summary":"These issues and PRs address a bug where approval deny rules could be evaded by prepending shell prefixes (e.g., 'cd repo &&') to commands, because fnmatch matching was anchored and did not check individual command segments.","subsystem":"agent","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":76037,"title":"[Bug]: approvals.deny rules are bypassed by any command prefix — fnmatch is anchored, so 'cd repo && git push --force' is allowed","url":null,"state":"open"},{"kind":"pr","number":76063,"title":"fix(approval): enforce deny rules after command prefixes","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"6fac5a2f6054f6257e99fb2ea6d8433226a5e58e","number":0},{"kind":"commit","value":"be38224b4","number":0}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":76178,"title":"fix(tools): match deny-rule segments to bypass shell prefix evasion (#76037)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#76063","number":76063}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":76551,"title":"fix(tools): deny rules now match command segments, not just full variants (#76037)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#76063","number":76063}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}