Finding / hermes-agent
2026-10-13-hermes-agent-simplex-sender-allowlists-now-match-numeric-contact-ids-rather-than-mutable-display-names
SimpleX sender allowlists now match numeric contact ids rather than mutable display names. A contact could change its display name to an allowlisted name and gain that sender’s access. The SimpleX adapter and intake matching now use the numeric contactId only; the earlier author date does not change the first stable boundary.
Channel: tagged-release (first stable v0.21.6). Half: defect. Date: 2026-09-27.
Operator consequence: Upgrade to v0.21.6+ and replace SIMPLEX_ALLOWED_USERS display-name entries with numeric contact IDs. This deliberately breaks name-based configuration.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-hermes-agent-simplex-sender-allowlists-now-match-numeric-contact-ids-rather-than-mutable-display-names
Profile citations
- Hermes Agent / claim / simplex-contact-ids
Source links
Primary links, including exact changelog lines when available.