Evidence record / hermes-agent
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-09-21-hermes-agent-capability-real-profile-browsing-password-blind-vault-sha-pinned-plugin-catalog
Capability: real-profile browsing, password-blind vault, SHA-pinned plugin catalog. Capability: real-profile browsing, password-blind vault, SHA-pinned plugin catalog
Channel: tagged-release. Half: capability (authority-bearing). Date: 2026-08-27 (browser), 2026-09-11 (vault, catalog).
Operator consequence: These are the largest authority grants of the window and all are opt-in. Try them only on a profile you would let a delegate use. Payment and real-login capability moves the review question from “what command will it run” to “which sites and accounts is it allowed to act on”; there is no per-site allowlist in the config block at v2026.9.21.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-hermes-agent-capability-real-profile-browsing-password-blind-vault-sha-pinned-plugin-catalog
Profile citations
- Hermes Agent / claim / vault-and-real-profile-browsing
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact