Evidence record / hermes-agent
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the signals and issues that cite it, below.
2026-07-01-hermes-agent-secrets-now-redacted-in-user-facing-command-guard-code-e
Secrets now redacted in user-facing command/guard/code-execution approval prompts (channel: main-unreleased, 2026-07-01). Operator consequence: P2 type/security fix. Credentials embedded in commands leaked verbatim into approval prompts shown on stdout and forwarded to Discord/Slack gateways (screenshottable/forwardable). redact_sensitive_text() now applied across prompt_dangerous_approval(), check_all_command_guards(), and check_execute_code_guard(). Redaction is display-only (raw command still executes; allowlist keys off pattern_key, unaffected). Teams running Hermes with messaging gateways in shared channels should re-audit exposure and upgrade (merge SHA 4a7a6fd). Full receipted detail lives in harvest/watchlist.md.
Receipt
Finding metadata
Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0
Finding ID: 2026-07-01-hermes-agent-secrets-now-redacted-in-user-facing-command-guard-code-e
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact