# NousResearch/hermes-agent · Windows updater self-lock on cryptography .pyd file

## Open now

- Nothing open on GitHub.

These items address a Windows-specific issue where the updater process holds a mapped .pyd file, causing cryptography package updates to fail with OS error 5. Work covers detection of the self-lock condition and repair logic for uv-managed virtual environments.

## TL;DR

- 3 member(s): 0 open issue(s), 1 closed issue(s), 0 open PR(s), 1 merged PR(s), 1 PR(s) closed without merging.
- A fix was merged to main in PR #86687. Verify it addresses your case.
- **Recommended:** read PR #86687 (and any competing PRs below) before filing. Confirm the merged change covers your symptom.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `resolved` · deciding PR(s): `pr-86687`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `1.00`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Closed / duplicate issues

- #83569: Windows: hermes update self-locks cryptography._rust.pyd — the updater process itself holds the .pyd mapped; any cryptography bump fails with os error 5 (no gateway/desktop required)

## Prior & competing PRs

- **#86687: fix(update): honesty train — HEAD-move gate, surfaced restart aborts, verified cold-start, self-lock defence**. merged to main · fix tier `verified`
  - maintainer direction: category `merged`
  - files: `contributors/emails/halldrix@users.noreply.github.com`, `hermes_cli/_early_recovery.py`, `hermes_cli/_install_repair.py`, `hermes_cli/main.py`, `hermes_cli/update_cmd.py`, `tests/hermes_cli/test_cmd_update.py`, `tests/hermes_cli/test_early_recovery.py`, `tests/hermes_cli/test_update_cold_start_gateway_liveness.py`, `tests/hermes_cli/test_update_gateway_restart_aborted.py`, `tests/hermes_cli/test_update_head_moved_gate.py`, `tests/hermes_cli/test_update_interrupted_recovery.py`, `tests/hermes_cli/test_update_self_lock.py`
- **#83590: fix(update): detect updater self-lock on Windows + repair uv-managed venvs**. closed without merge
  - maintainer direction: category `superseded_by_pr`; implication `superseded`; refs `19cff8930`, `#83569`, `#83590`

## Fix status

- Merged to main in PR #86687 (cited above). No release data is tracked. Verify downstream.
- Fix last verified (merged) `2026-08-15`.
- Subsystem: `hermes_cli`