Evidence record / hermes-agent

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configuration

Canary removes browser extension control APIs and configuration. The canary series removes /v1/browser-control, /v1/artifacts, and browser.controller.* RPC/events alongside the legacy browser tools. The v52 migration removes browser.extension_control; documentation points to browser.cdp_url. These interfaces remain outside this series’ stable availability through v0.22.5.

Channel: preview-or-beta. Half: both. Date: 2026-10-23.

Operator consequence: Audit browser extension and remote-controller adapters as well as tool-name allowlists before switching to canary. A tool rename audit alone misses the removed transport. Test the replacement CDP connection and intentional host access separately.

Receipt

Finding metadata

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configuration

Profile citations

Source links

Primary links, including exact changelog lines when available.

Versioned source: run artifact