release aidev BREAKING NEEDS REVIEW SIG 4/5

Hermes Agent v0.13.0: durable multi-agent Kanban, session auto-resume, 8 P0 security fixes

Kanban ships as a durable multi-agent board with heartbeats, reclaim and zombie detection, sessions auto-resume after a gateway restart, and checkpoint persistence is rewritten. A security wave closes 8 P0s and flips several defaults — redaction is on by default, WhatsApp rejects unknown senders, and Discord role allowlists become guild-scoped (closing a CVSS 8.1 cross-guild DM bypass) — so existing message flows may start being refused.

PUBLISHED2026-05-07
OBSERVED2026-08-11
AGE3mo
SOURCES1
  • Multi-agent Kanban: durable board, multiple workers claiming and handing off tasks, heartbeat, reclaim, zombie detection, auto-block on incomplete exit, per-task retries, hallucination recovery gate
  • /goal locks the agent on a target across turns (Ralph loop as a primitive)
  • video_analyze tool for native video understanding on Gemini and compatible multimodal models
  • xAI Custom Voices as a TTS provider with voice cloning
  • Static gateway + CLI messages translated to 7 locales (zh, ja, de, es, fr, uk, tr); docs site gains zh-Hans
  • Google Chat as 20th messaging platform, plus a platform-plugin hooks surface (IRC and Teams migrated onto it)
  • Sessions auto-resume after gateway bounce, /update restart or source reload
  • Security (8 P0): redaction ON by default; Discord role-allowlists guild-scoped (CVSS 8.1 cross-guild DM bypass); WhatsApp rejects strangers by default; TOCTOU windows closed in auth.json and MCP OAuth; browser cloud-metadata SSRF floor; cron prompt-injection scan of assembled skill content; hermes debug share redacts at upload
  • Checkpoints v2: rewritten state persistence, real pruning, disk guardrails, no orphan shadow repos
  • Post-write delta lint on write_file and patch for Python, JSON, YAML, TOML
  • no_agent cron mode runs a script with no LLM; empty stdout stays silent
  • allowed_channels / allowed_chats / allowed_rooms across Slack, Telegram, Mattermost, Matrix, DingTalk
  • Providers are pluggable: ProviderProfile ABC + plugins/model-providers/
  • API server: X-Hermes-Session-Key header gives memory providers a stable per-session id
  • MCP gains SSE transport with OAuth forwarding
  • 864 commits, 588 merged PRs, 282 issues closed (13 P0, 36 P1)
  • Note: source text truncated mid-sentence in the MCP item
featuresecuritycapabilityfixbreakingapi-change

COMMUNITY

No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.