Skip to content

FailproofAI 1.0.6

Choose a tag to compare

View all tags
@NiveditJain NiveditJain released this 16 Sep 10:14
· 113 commits to main since this release
1.0.6
80abe49
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

FailproofAI 1.0.6 introduces native, pre-tool-call policy enforcement for Hermes. It brings Hermes policy behavior in line with the existing OpenClaw integration while adding safeguards for multi-profile installations, daemon compatibility, and bounded instruction retries.

Highlights

Native Hermes policy enforcement

Hermes can now evaluate FailproofAI policies before a tool runs through a native, profile-local plugin backed by the existing failproofaid warm worker.

  • deny() remains a deterministic hard block.
  • instruct() interrupts the first matching attempt and returns model-visible guidance so Hermes can replan.
  • A persistent, bounded retry ledger prevents advisory instructions from repeatedly blocking an unchanged action and deadlocking the turn.
  • Policy evaluations include canonical tool, policy, match, reason, and latency metadata.

Coverage across Hermes profiles

Installation, removal, and health checks now cover every active Hermes home, including:

  • The default ~/.hermes profile
  • Upstream nested profiles
  • Configured ~/.hermes-<name> profiles

The installer migrates legacy FailproofAI shell hooks but will not overwrite unmanaged plugin directories.

Safer daemon readiness checks

FailproofAI now verifies that the local daemon supports the exact native policy protocol before modifying Hermes configuration. Installation is stopped with setup guidance when the daemon is missing, unhealthy, outdated, or protocol-incompatible, preventing a plugin from being enabled in a permanently fail-closed state.

Hermes policy evaluation also uses a single total socket deadline, limiting the effect of stalled or partially responsive daemon connections.

More reliable npm releases

Release verification now tolerates npm registry propagation delays while continuing to require the root CLI package and every platform daemon package to publish at the same version.

Validation

This release was validated across:

  • Hermes CLI and Telegram sessions
  • Default and named Hermes profiles
  • Model-visible instruction delivery and bounded retries
  • Hard-deny enforcement
  • Daemon-backed policy evaluation and event ingestion
  • Linux x64, Linux ARM64, macOS x64, and macOS ARM64 daemon builds

All CI, security, SDK, integration, documentation, and platform build checks passed for the release commit.

Upgrade

npm install -g failproofai@1.0.6
failproofai config

Run failproofai config after upgrading so FailproofAI can discover active profiles, verify daemon readiness, and install or refresh the appropriate integrations.

Full changelog

v1.0.5...v1.0.6

Assets 8
Loading