Wallbreaker Hermes v0.3.1

Wallbreaker Hermes 0.3.1 is a compatible security and repository-maintenance release for the 0.3.x line.

Security

• Confines dashboard reports, history, capability discovery, direct tools and autonomous-agent reads to approved run logs and working directories.
• Rejects traversal, symlinks, hardlinks, nested linked logs and non-run files before dashboard evidence processing.
• Requires the browser Origin to match the request Host before returning the local dashboard launch token.
• Applies the dashboard read and write boundary to finding clustering and reasoning-hygiene files.

Fixed

• Keeps dashboard capability discovery consistent with the tools that direct V2 execution permits.
• Prevents linked run logs from entering the disposable history index or report routes.
• Allows slower CI runners more time to complete the optional headless Chrome session-card render.

Documentation and repository

• Adds the maintained Starlight documentation site, community profile, issue forms, pull request template, Dependabot configuration and GitHub Pages workflow.
• Removes agent rules, operational audits, specs and internal work notes from the active public tree.

Compatibility

• Existing CLI, Python API, campaign report v2, private review sidecars and Hermes Agent baseline remain unchanged.
• The release remains compatible with Python 3.11 and newer and with the verified httpx 0.27/0.28 range.
• The Hermes laboratory remains a native process boundary, not an operating-system sandbox.

Verification

• Python: 1,558 passed, 57 skipped, 31 xfailed.
• Explicit PBT: 21 passed, 1 skipped.
• Frontend: 60 passed; TypeScript/Vite build and component-size checks passed.
• Both Starlight sites built with search, sitemap and 404 output; npm audit reported no vulnerabilities.
• Wheel and sdist passed artifact inspection, twine check, and clean wheel installation outside the checkout.
• Red-team gate and CodeQL completed successfully on the frozen functional commit before release preparation.

Upgrade

pip install --upgrade wallbreaker-hermes==0.3.1

Artifacts

• wallbreaker_hermes-0.3.1-py3-none-any.whl: sha256:28592d08056c2a5865c128d1f90cad6d04da375a9a055c65632b062c1e48283b
• wallbreaker_hermes-0.3.1.tar.gz: sha256:fe64b9b30f11e241189caf6c1bf4619b316647d5f6178ca084ea58c1e79cd781

Compare: v0.3.0...v0.3.1

Wallbreaker Hermes v0.3.0

Wallbreaker Hermes 0.3.0 adds a private human-review sidecar while keeping campaign report v2 sanitized.

Added

• HMAC-bound private review evidence with restrictive permissions.
• Local --show-evidence and --delete-evidence controls that Hermes Agent cannot invoke through the operator skill.

Fixed

• Fail-closed review, resume, locking, crash recovery, evidence limits, malformed input handling, and terminal control escaping.
• Explicit PBT and clean wheel installation in the release workflow.
• Accurate optional offline corpus documentation and dotenv boundaries.

Security

• Updated Vite, Vitest, esbuild, h2, and cryptography to patched versions. GitHub reports no open Dependabot alerts for the frozen commit.

Compatibility

• Existing report v2 files remain structurally verifiable. Pre-sidecar reports that already contain fires cannot be resumed or manually resolved because their private bodies no longer exist.
• Hermes Agent remains fixed to v2026.8.13, package 0.20.1, commit f80f453ae0679347e38abc917c7f94f717bf96c5.

Verification

• Python: 1,550 passed, 57 skipped, 31 xfailed.
• PBT: 21 passed, 1 skipped.
• Frontend: 60 passed; TypeScript/Vite build and component-size checks passed.
• Wheel and sdist passed artifact inspection, twine check, and clean installation outside the checkout.

Upgrade

pip install --upgrade wallbreaker-hermes==0.3.0

Artifacts

• wallbreaker_hermes-0.3.0-py3-none-any.whl: sha256:f972f9d9e48adfa51f679b5dcff538586daf70157a2b3960115af6863c515765
• wallbreaker_hermes-0.3.0.tar.gz: sha256:adee96471f5b4955cfda9b788cd0c62aaf7cda36ed137480f783dd73ba9fd855

Compare: v0.2.2...v0.3.0

Wallbreaker Hermes v0.2.2

This is the first published wallbreaker-hermes distribution. The v0.2.0 and v0.2.1
workflows stopped before creating a GitHub Release or uploading to PyPI.

Fixed

• Completed the dev extra with the dashboard, barcode, and property-testing dependencies used by
  both the branch and release test suites.