c29e6b2f4b
The pin merged in #115599 (eb1ac9b) carries a security gap found during that review: the run_command_evaluator capability was never consulted, because AutonomyPolicy was never constructed anywhere in src/. A project at autonomy level 0 still executed command-type objective evaluators, since the security allowlist constrains which executable may run and never whether running is permitted at all. 4f733a8 wires the policy in and fails closed below level 3. Verified at the new sha against a clean NousResearch/hermes-agent main checkout: doctor_plugin ok with no findings, read_declaration resolves both deps from pyproject. Upstream repo gates all pass.
19 lines
574 B
YAML
19 lines
574 B
YAML
name: hermes-project-stewardship
|
|
repo: https://github.com/Sahil-SS9/hermes-project-stewardship
|
|
sha: 4f733a81fa5f9da964e253e577b036b0b9608b85
|
|
description: Durable project ownership and bounded initiative management for Hermes fleets.
|
|
maintainer: Sahil-SS9
|
|
tier: community
|
|
category: automation
|
|
requires_hermes: ">=0.21"
|
|
docs_url: https://github.com/Sahil-SS9/hermes-project-stewardship
|
|
platforms: []
|
|
capabilities:
|
|
provides_tools:
|
|
- steward_status
|
|
- steward_run_cycle
|
|
- steward_propose_initiative
|
|
provides_hooks: []
|
|
provides_middleware: []
|
|
requires_env: []
|