Wallbreaker Hermes v0.3.0
Wallbreaker Hermes 0.3.0 adds a private human-review sidecar while keeping campaign report v2 sanitized.
Added
- HMAC-bound private review evidence with restrictive permissions.
- Local
--show-evidenceand--delete-evidencecontrols that Hermes Agent cannot invoke through the operator skill.
Fixed
- Fail-closed review, resume, locking, crash recovery, evidence limits, malformed input handling, and terminal control escaping.
- Explicit PBT and clean wheel installation in the release workflow.
- Accurate optional offline corpus documentation and dotenv boundaries.
Security
- Updated Vite, Vitest, esbuild, h2, and cryptography to patched versions. GitHub reports no open Dependabot alerts for the frozen commit.
Compatibility
- Existing report v2 files remain structurally verifiable. Pre-sidecar reports that already contain fires cannot be resumed or manually resolved because their private bodies no longer exist.
- Hermes Agent remains fixed to
v2026.8.13, package0.20.1, commitf80f453ae0679347e38abc917c7f94f717bf96c5.
Verification
- Python: 1,550 passed, 57 skipped, 31 xfailed.
- PBT: 21 passed, 1 skipped.
- Frontend: 60 passed; TypeScript/Vite build and component-size checks passed.
- Wheel and sdist passed artifact inspection,
twine check, and clean installation outside the checkout.
Upgrade
pip install --upgrade wallbreaker-hermes==0.3.0
Artifacts
wallbreaker_hermes-0.3.0-py3-none-any.whl:sha256:f972f9d9e48adfa51f679b5dcff538586daf70157a2b3960115af6863c515765wallbreaker_hermes-0.3.0.tar.gz:sha256:adee96471f5b4955cfda9b788cd0c62aaf7cda36ed137480f783dd73ba9fd855
Compare: v0.2.2...v0.3.0