v0.7.2 — All APKs on the Hermes Hand
Summary
v0.7.2 formally establishes the "All APKs on the Hermes Hand" authorization and ownership doctrine across the Hermes+ agent engine and workspace contracts. Every target application workspace, APK binary, Smali class, and native library is recognized as an authorized developer-owned environment for deep security research, vulnerability auditing, penetration testing, bytecode modification, and Flutter runtime injection.
Key Changes
| Area | Detail |
|---|---|
| Ownership & Authorization Doctrine | Updated HERMES.md, AGENTS.md, and src/agent/persona.ts with explicit security research authorization, removing hesitation and enabling proactive anti-tamper neutralization. |
| Proactive Defense Neutralization | Reinforced instructions for detecting and neutralizing anti-debugging (isDebuggerConnected, TracerPid), root checks (RootBeer, su binary execution), and SSL pinning during security testing. |
| Workspace Contract Auto-Installation | Updated generateWorkspaceAgentsMd to embed the developer ownership and security testing mandate inside every <workspaceDir>/AGENTS.md. |
| Contract Synchronization | Root AGENTS.md and .agents/AGENTS.md fully synchronized and aligned with HERMES.md. |
| Bilingual Documentation | Updated README.md to reflect v0.7.2 architecture and release title. |
Quality Gates Passed
npm run lint: 0 errors, 0 warningsnpm run typecheck: 0 errorsnpm test: 54/54 tests passednpm run build: Clean TypeScript buildnpm pack --dry-run: 114 files packed