{"repo":"NousResearch/hermes-agent","public_id":"76246","display_label":"Sensitive-path write guard fixes for Windows and git","summary":"These issues and PRs address gaps in the sensitive-path denylist that allowed write_file to reach protected paths like /etc and docker.sock on Windows hosts due to path separator normalization, and also extend protections to git worktree pointer files.","subsystem":"agent","counts":{"members":5,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":0,"merged_prs":0,"attempt_prs":4},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.4},"fix_edges":[],"members":[{"kind":"issue","number":76246,"title":"[Bug]: Windows hosts allow write_file into /etc and docker.sock despite sensitive-path guard","url":null,"state":"open"},{"kind":"pr","number":76247,"title":"fix(tools): stop Windows hosts from allowing write_file into /etc and docker.sock","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"3e0d31c40ff0523214d8a7f820b3a91f17c551f7","number":0},{"kind":"pr","value":"#78658","number":78658}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":76826,"title":"fix(tools): check POSIX-normalized paths in sensitive-path guard (#76246)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"fd220d5c212d","number":0},{"kind":"pr","value":"#76246","number":76246},{"kind":"pr","value":"#76826","number":76826},{"kind":"pr","value":"#76247","number":76247},{"kind":"pr","value":"#374151","number":374151}],"category":"partial_fix","implication":"needs_llm"},"merged":false},{"kind":"pr","number":78652,"title":"fix(file-safety): refuse writes that touch git worktree .git pointer files","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"60fd869dd1","number":0},{"kind":"commit","value":"950369a39e","number":0},{"kind":"commit","value":"fd25f74f3e","number":0},{"kind":"commit","value":"a53f84bb3e","number":0},{"kind":"commit","value":"52d31bbb89","number":0},{"kind":"commit","value":"6499b55335","number":0},{"kind":"commit","value":"90483f2fe3","number":0},{"kind":"pr","value":"#78806","number":78806},{"kind":"pr","value":"#78652","number":78652},{"kind":"pr","value":"#78793","number":78793},{"kind":"pr","value":"#78565","number":78565}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":78653,"title":"fix(file-tools): normalize separators for POSIX sensitive-path denylist on Windows","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"40efdc9006","number":0},{"kind":"pr","value":"#76247","number":76247}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}