Cairn
NousResearch/hermes-agent

Sensitive-path write guard fixes for Windows and git

Cluster 76246 · agent. Data as of

2 open items. Fix attempted, not merged.

The short answer

1open issue
1open PR
5items grouped
Known?
Yes. 5 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 3 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 1 PR.

These issues and PRs address gaps in the sensitive-path denylist that allowed write_file to reach protected paths like /etc and docker.sock on Windows hosts due to path separator normalization, and also extend protections to git worktree pointer files.

Open issues1

  • Issue#76246[Bug]: Windows hosts allow write_file into /etc and docker.sock despite sensitive-path guard

Open PRs1

  • PR#76247fix(tools): stop Windows hosts from allowing write_file into /etc and docker.sock

3 PRs closed without merging

From the close comments: done elsewhere 1 · partial fix 1 · superseded by another PR 1

  • #76826 fix(tools): check POSIX-normalized paths in sensitive-path guard (#76246) · partial fix → fd220d5, #76246, #76826, #76247, #374151
  • #78652 fix(file-safety): refuse writes that touch git worktree .git pointer files · superseded by another PR → 60fd869, 950369a, fd25f74, a53f84b, 52d31bb, 6499b55, 90483f2, #78806, #78652, #78793, #78565
  • #78653 fix(file-tools): normalize separators for POSIX sensitive-path denylist on Windows · done elsewhere → 40efdc9, #76247
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.40: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
agent
Closed issues
0
Attempts
3 PRs closed without merging

For your agent

The same facts, typed.

cluster/76246.json
cluster/76246.md