v2.5.3

What's New

Hermes-Agent Integration (Bidirectional)

• Phase 1-3: MCP Bridge + ACP Dispatch fully integrated
• ACP job status query via REST API

Security & Quality

• 25 security and quality fixes from code audit
• Bounded ReadAll, SQL injection protection, token validation
• Timer leak fix in acp_client retry loop
• Tenant isolation hardening

Developer Experience

• VSCode extension for CoRag development
• CoRag Playground for online agent testing
• Preset workflow templates marketplace

CI/CD

• Monthly release workflow
• SLSA3 provenance attestation (Level 3)
• CI parallel gate (faster builds)

Full Changelog: v2.5.2...v2.5.3