NousResearch/hermes-agent

macOS Electron Framework entitlements re-signing fix

Cluster 85620 · apps/desktop. Data as of 2026-10-29 11:48 UTC

Nothing open on GitHub. Fix merged in #127225 on 30 Sep 2026. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 3 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #127225. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this resolved, deciding PR #127225. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #127225, then check it covers your case.

Read #127225 Pick up a Lab task

These items address a bug where the macOS local code-signing step omits entitlements on the Electron Framework, causing V8 SIGTRAP crashes on self-update. The work involves policy-aware re-signing logic that preserves JIT entitlements and uses a pinned ad-hoc fallback without downgrading publisher signing.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#127225 fix(desktop): policy-aware macOS re-signing — framework entitlements, pinned ad-hoc fallback, no publisher-signing downgrade

merged to main

files: hermes_cli/main_desktop.py, tests/fixtures/resolution_allowlist.json, tests/hermes_cli/test_desktop_install_after_update.py, tests/hermes_cli/test_gui_command.py

1 PR closed without merging

From the close comments: merged via another change 1

#91207 fix(desktop): preserve Electron Framework JIT entitlements · merged via another change → 60800e8, e94fc4e

Closed issues · 1

Closed#85620Desktop macOS: _desktop_macos_local_codesign omits entitlements on Electron Framework → V8 SIGTRAP on self-update

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: apps/desktop
Merged PRs: #127225
Closed issues: 1
Attempts: 1 PR closed without merging
Fix link checked: 30 Sep 2026

For your agent

The same facts, typed.

cluster/85620.json
cluster/85620.md