{"repo":"NousResearch/hermes-agent","public_id":"80884","display_label":"Gateway multiplexed profile A2A authorization fixes","summary":"These items address authorization failures for A2A peers under the gateway's profile multiplexer, specifically where secondary profiles did not correctly honor upstream authorization settings. Related fixes also scope identity, webhook, TTS cache, and log files per multiplexed profile.","subsystem":"gateway","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":101254,"merged_at":"2026-09-02T13:48:32+00:00"},"resolution":{"state":"resolved","by":"pr-101254"},"freshness":{"state":"verified","last_verified_at":"2026-09-02T13:48:32+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":80874,"pr_number":101254,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-02T13:48:32+00:00"},{"issue_number":80884,"pr_number":101254,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-02T13:48:32+00:00"},{"issue_number":85637,"pr_number":101254,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-02T13:48:32+00:00"},{"issue_number":98749,"pr_number":101254,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-09-02T13:48:32+00:00"},{"issue_number":99634,"pr_number":101254,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-02T13:48:32+00:00"},{"issue_number":100697,"pr_number":101254,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-02T13:48:32+00:00"}],"members":[{"kind":"issue","number":80884,"title":"A2A peers rejected by gateway authz under profile multiplexer (authorization_is_upstream not honored for secondary profiles)","url":null,"state":"closed"},{"kind":"pr","number":80956,"title":"fix(gateway): prevent multiplexed A2A credential cross-profile rejection","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"87ad7aa0b07","number":0},{"kind":"pr","value":"#101254","number":101254}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":101254,"title":"fix(gateway): Raft/A2A identity, A2A authz, webhook disable, TTS cache and log files scoped per multiplexed profile (#100697 #99634 #85637 #80884, salvage #100392 #100382 #100709 #98756 #85712 #80956)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["gateway/authz_mixin.py","gateway/config.py","gateway/run.py","plugins/platforms/a2a/adapter.py","plugins/platforms/a2a/security.py","plugins/platforms/raft/adapter.py","tests/gateway/test_config.py","tests/gateway/test_multiplex_log_routing.py","tests/gateway/test_multiplex_profile_authz.py","tests/gateway/test_raft_adapter.py","tests/plugins/test_a2a_plugin.py","tests/tools/test_terminal_tool_requirements.py","tests/tools/test_tts_output_dir_profile_scope.py","tools/registry.py","tools/tts_tool.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}