Hermes 0.21.7 routes unattended Gateway commands through configured policy
v0.21.7 (2026-10-12) repairs the running Gateway's webhook, msgraph_webhook and no-notifier API paths. Previously its process-wide ask flag could bypass approvals.unattended_mode and, in smart mode, send commands to the guardian; a model approval could execute them despite intended unattended denial. No-notifier API requests could also return unanswerable pending results. The repair consults the configured unattended branch before the guardian on these paths.
What this changes for operators
- Unattended Gateway owners: upgrade to v0.21.7 and inspect approvals.unattended_mode before launch, especially a saved approve value. Previously model-approved jobs can now be blocked. Add only intended command_allowlist patterns rather than broadly disabling approval.
- Review flagged commands executed by earlier webhook sessions. Test a harmless denied command on each used no-notifier path and record whether it executes; test notifier-backed requests separately. Earlier user denies and hard floors remain, and container/YOLO/allowlist branches differ.
- Those mode-specific results would settle the installed policy’s effect. The stronger retained stop can create exceptions needing attention, while no-notifier requests no longer depend on a human reply they cannot accept.
Primary sources
- commit 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached github.com/NousResearch/hermes-agent/commit/8918717b1ad2b52d1389756a3581a9860b98397b
- commit 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached github.com/NousResearch/hermes-agent/commit/71ff5238ec4643ddc6bddcfbc8be4b1cdd400684
- tagged_commit_file 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached NousResearch/hermes-agent / tools/approval.py#L910-L942
- tagged_commit_file 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached NousResearch/hermes-agent / tools/approval.py#L827-L880
- tagged_commit_file 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached NousResearch/hermes-agent / tools/approval.py#L1128-L1169
- tagged_commit_file 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached NousResearch/hermes-agent / tools/approval_smart.py#L116-L131
- tagged_commit_file 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached NousResearch/hermes-agent / hermes_cli/config_defaults.py#L1665-L1700
Signal metadata
Source findings
- 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached 2026-10-13-hermes-agent-unattended-deny-did-not-apply-inside-a-running-gateway-until-v0-21-7-webhook-turns-reached
Featured in
- The Handoff Has an API / 2026-10-13
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-10-13-hermes-agent-unattended-gateway-policy-now-applies
Research evidence and publication history are open in the repository.