Finding / hermes-agent
2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configuration
Canary removes browser extension control APIs and configuration. The canary series removes /v1/browser-control, /v1/artifacts, and browser.controller.* RPC/events alongside the legacy browser tools. The v52 migration removes browser.extension_control; documentation points to browser.cdp_url. These interfaces remain outside this series’ stable availability through v0.22.5.
Channel: preview-or-beta. Half: both. Date: 2026-10-23.
Operator consequence: Audit browser extension and remote-controller adapters as well as tool-name allowlists before switching to canary. A tool rename audit alone misses the removed transport. Test the replacement CDP connection and intentional host access separately.
Receipt
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configuration
Profile citations
- Hermes Agent / claim / canary-browser-control-api-removal
- Hermes Agent / posture / governance
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configurationgithub.com/NousResearch/hermes-agent/commit/b87977caddafb4dd1842d782ae4ae7e3af98e575commit2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configurationgithub.com/NousResearch/hermes-agent/commit/0f8bbed1ed3b0272c1f7ece147ea823b79789918commit2026-10-24-hermes-agent-canary-removes-browser-extension-control-apis-and-configurationgithub.com/NousResearch/hermes-agent/commit/b04f5a38bb659bccf57dea4232554e33f093e9cc