feat(plugins): add hermes-approval-guard dual-agent supervision plugin - #34699

Open

kkangg1 wants to merge 27 commits into

NousResearch:mainfrom

kkangg1:feat/approval-guard-plugin

Commits on Jun 24, 2026

feat(plugins): add hermes-approval-guard dual-agent supervision plugin
kkangg1
committed
4c0a244
refactor(plugins): rewrite approval guard as stateless two-stage design
kkangg1
committed
9e25abe
docs(plugins): update README and tests for stateless v2 architecture
kkangg1
committed
efcb237
fix(plugins): correct Hindsight default port from 8421 to 8888
kkangg1
committed
90f23b6
fix(plugins): remove hardcoded provider, fix ACP output parsing
kkangg1
committed
fdc1c91
fix(plugins): correct Hindsight API endpoints and body format
kkangg1
committed
2aa3eff
refactor(plugins): config-driven Hindsight/Honcho URLs with priority chain
kkangg1
committed
535dcbe
fix(plugins): audit cleanup — config reuse, dead code removal, prompt hardening
kkangg1
committed
28dbcc0
fix(plugins): use explicit config only for memory backend
kkangg1
committed
660132c
docs(plugins): update README with terminal flow details and explicit config
kkangg1
committed
623a33a
refactor(plugins): translate approval-guard to English
kkangg1
committed
c111711
revert: keep original contributor-check.yml (no workflow scope in PAT)
kkangg1
committed
5891534
revert: restore workflow files to pre-rebase state (PAT lacks workflow scope)
kkangg1
committed
ce0846a
fix(plugins): audit fixes — C1/C2/H1/H2/H3 for approval-guard
kkangg1
committed
d2936c3
docs(plugins): sync README with audit fixes — LLM config, stage2 safety, SAFE_TOOLS count
kkangg1
committed
0b067f7
fix(plugins): tirith integration + ACP empty-context short-circuit + config TTL
kkangg1
committed
01496b8
fix(plugins): monkey-patch AIAgent._invoke_tool for session_id injection
kkangg1
committed
31ecd22
fix(plugins): call-stack session_id discovery + fix config_disable permanent lock
kkangg1
committed
e8ca3b4
chore: drop CI workflow edits from PR (PAT lacks workflow scope)
kkangg1
committed
2a0e77e

Commits on Jul 17, 2026

Merge remote-tracking branch 'upstream/main' into feat/approval-guard-plugin
Hermes Agent
committed
cb402b6
fix(approval-guard): address security review on read-only boundary and fail-closed paths
Hermes Agent
committed
0f8df34
test(approval-guard): fix test_integration to run from plugin dir
Hermes Agent
committed
198680c

Navigation Menu

Uh oh!

feat(plugins): add hermes-approval-guard dual-agent supervision plugin - #34699

feat(plugins): add hermes-approval-guard dual-agent supervision plugin#34699
kkangg1 wants to merge 27 commits into
NousResearch:mainfrom
kkangg1:feat/approval-guard-plugin

Commits on Jun 24, 2026

feat(plugins): add hermes-approval-guard dual-agent supervision plugin

refactor(plugins): rewrite approval guard as stateless two-stage design

docs(plugins): update README and tests for stateless v2 architecture

fix(plugins): correct Hindsight default port from 8421 to 8888

fix(plugins): remove hardcoded provider, fix ACP output parsing

fix(plugins): correct Hindsight API endpoints and body format

refactor(plugins): config-driven Hindsight/Honcho URLs with priority chain

fix(plugins): audit cleanup — config reuse, dead code removal, prompt hardening

fix(plugins): use explicit config only for memory backend

docs(plugins): update README with terminal flow details and explicit config

refactor(plugins): translate approval-guard to English

revert: keep original contributor-check.yml (no workflow scope in PAT)

revert: restore workflow files to pre-rebase state (PAT lacks workflow scope)

fix(plugins): audit fixes — C1/C2/H1/H2/H3 for approval-guard

docs(plugins): sync README with audit fixes — LLM config, stage2 safety, SAFE_TOOLS count

fix(plugins): tirith integration + ACP empty-context short-circuit + config TTL

fix(plugins): monkey-patch AIAgent._invoke_tool for session_id injection

fix(plugins): call-stack session_id discovery + fix config_disable permanent lock

chore: drop CI workflow edits from PR (PAT lacks workflow scope)

Commits on Jul 17, 2026

Merge remote-tracking branch 'upstream/main' into feat/approval-guard-plugin

fix(approval-guard): address security review on read-only boundary and fail-closed paths

test(approval-guard): fix test_integration to run from plugin dir

Commits on Jul 31, 2026

Merge remote-tracking branch 'upstream/main' into pr-34699

fix(approval-guard): harden stage2 reviewer subprocess boundary

fix(approval-guard): tolerate extra pre_tool_call dispatch kwargs

test(approval-guard): fail on plugin import errors, add pytest suite

docs(approval-guard): position against native approve directive