Files
hermes-agent/website/docs/developer-guide
teknium1 eba8199ce3 docs(desktop): say plainly that desktop plugins are not sandboxed
The catalog page claimed admission's lint means a marketplace install 'cannot quietly rewire the app'; the lint is a handful of regexes and plugin.js runs in the app realm with the full window.hermesDesktop bridge. The user guide, catalog trust model and SDK security section now describe the real model: human review of a pinned SHA plus two tripwires (lint + loader import allowlist), no isolation.
2026-09-21 22:39:35 -07:00
..