Evidence · DiggingBeagle record
Hermes Agent pull request 133369: provider and audit value bounds
Merged maintainer patch limits provider values to 128 characters and serialised audit string values to 256 characters, with regression tests for unknown-provider and rate-limited paths.
- Published
- Oct 5, 2026
- Publisher
- NousResearch/hermes-agent maintainers
- Source role
- patch commit artifact
Evidence record
Merged maintainer patch limits provider values to 128 characters and serialised audit string values to 256 characters, with regression tests for unknown-provider and rate-limited paths.
Claim-level citations (1)
- supportsHermes Agent wrote anonymous login input to disk before rejecting it: NousResearch merged PR #133369 on October 5: provider IDs longer than 128 characters are rejected before password-login handling, while serialized audit strings are separately capped at 256 characters, including nested values. Its regression checks cover both unknown-provider and rate-limited authentication paths.
Pull request #133369: What does this PR do; Changes Made; How to Test; merge October 5