Finding / hermes-agent
2026-09-21-hermes-agent-capability-real-profile-browsing-password-blind-vault-sha-pinned-plugin-catalog
Capability: real-profile browsing, password-blind vault, SHA-pinned plugin catalog. Capability: real-profile browsing, password-blind vault, SHA-pinned plugin catalog
Channel: tagged-release. Half: capability (authority-bearing). Date: 2026-08-27 (browser), 2026-09-11 (vault, catalog).
Operator consequence: These are the largest authority grants of the window and all are opt-in. Try them only on a profile you would let a delegate use. Payment and real-login capability moves the review question from “what command will it run” to “which sites and accounts is it allowed to act on”; there is no per-site allowlist in the config block at v2026.9.21.
Receipt
Finding metadata
Run: 2026-09-21-weekly-digest-2026-08-20_2026-09-21-frontier-v0
Finding ID: 2026-09-21-hermes-agent-capability-real-profile-browsing-password-blind-vault-sha-pinned-plugin-catalog
Profile citations
- Hermes Agent / claim / vault-and-real-profile-browsing
Source links
Primary links, including exact changelog lines when available.