{"repo":"NousResearch/hermes-agent","public_id":"98599","display_label":"authserv_id default value bug and fix","summary":"The authserv_id configuration option defaults to empty rather than the documented From-domain value, silently disabling header-injection defense. These members track the bug report and subsequent fix attempts to correct the default behavior.","subsystem":"gateway","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":0,"closed_issues":0,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":132255,"merged_at":"2026-10-03T15:24:05+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-10-03T15:24:05+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":98599,"pr_number":132255,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-10-03T15:24:05+00:00"}],"members":[{"kind":"issue","number":98599,"title":"`authserv_id` defaults to empty, contradicting the comment above it — header-injection defense is silently off by default","url":null,"state":"open"},{"kind":"pr","number":98611,"title":"fix(email): default authserv_id to the agent From-domain as documented","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"db45b44ab7","number":0},{"kind":"pr","value":"#132255","number":132255},{"kind":"pr","value":"#88560","number":88560}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":98664,"title":"fix(email): default authserv_id to the agent From-domain","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#98611","number":98611}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":132255,"title":"Email trusts only the topmost auth header and skips unauthorized bodies (salvage #129772)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["plugins/platforms/email/adapter.py","tests/gateway/test_email.py","tests/gateway/test_email_imap_id_protocol.py","tests/gateway/test_email_robustness.py","tests/gateway/test_poller_fd_lifecycle.py","website/docs/user-guide/messaging/email.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}