Finding / hermes-agent

2026-08-03-hermes-approval-guardrails-and-runaway-caps-reach-a-tag

Hermes v0.20.0 (tag v2026.8.3, 2026-08-03) puts last window's approval guardrails into a tagged release: 'hermes approvals suggest' mines approval history into allowlist proposals, an operator-customisable approvals.smart_policy, a consecutive-denial circuit breaker that 'stops a misbehaving loop cold', profile-correct desktop pairing approvals, and a new approval gate for docker/podman daemon-redirect commands (#72259, #72186, #72203, #74446, #71092). It also adds session-wide runaway-loop caps for web_search and delegate_task (#66600), credited in the notes as Claude Code-inspired -- which repairs the gap this publication recorded in the 2026-06-04..06-16 issue, where Hermes removed its default 600-second subagent wall-clock timeout the same week it shipped fire-and-forget background subagents, leaving runaway detection to heartbeat staleness alone. Channel: tagged-release. Resolves a carry-forward check.

Receipt

Finding metadata

Run: 2026-08-03-weekly-digest-2026-07-27_2026-08-03-frontier-v0

Finding ID: 2026-08-03-hermes-approval-guardrails-and-runaway-caps-reach-a-tag

Source links

Primary links, including exact changelog lines when available.