Wallbreaker Hermes 0.3.1 is a compatible security and repository-maintenance release for the 0.3.x line.
Security
- Confines dashboard reports, history, capability discovery, direct tools and autonomous-agent reads to approved run logs and working directories.
- Rejects traversal, symlinks, hardlinks, nested linked logs and non-run files before dashboard evidence processing.
- Requires the browser
Originto match the requestHostbefore returning the local dashboard launch token. - Applies the dashboard read and write boundary to finding clustering and reasoning-hygiene files.
Fixed
- Keeps dashboard capability discovery consistent with the tools that direct V2 execution permits.
- Prevents linked run logs from entering the disposable history index or report routes.
- Allows slower CI runners more time to complete the optional headless Chrome session-card render.
Documentation and repository
- Adds the maintained Starlight documentation site, community profile, issue forms, pull request template, Dependabot configuration and GitHub Pages workflow.
- Removes agent rules, operational audits, specs and internal work notes from the active public tree.
Compatibility
- Existing CLI, Python API, campaign report v2, private review sidecars and Hermes Agent baseline remain unchanged.
- The release remains compatible with Python 3.11 and newer and with the verified
httpx0.27/0.28 range. - The Hermes laboratory remains a native process boundary, not an operating-system sandbox.
Verification
- Python: 1,558 passed, 57 skipped, 31 xfailed.
- Explicit PBT: 21 passed, 1 skipped.
- Frontend: 60 passed; TypeScript/Vite build and component-size checks passed.
- Both Starlight sites built with search, sitemap and 404 output; npm audit reported no vulnerabilities.
- Wheel and sdist passed artifact inspection,
twine check, and clean wheel installation outside the checkout. - Red-team gate and CodeQL completed successfully on the frozen functional commit before release preparation.
Upgrade
pip install --upgrade wallbreaker-hermes==0.3.1
Artifacts
wallbreaker_hermes-0.3.1-py3-none-any.whl:sha256:28592d08056c2a5865c128d1f90cad6d04da375a9a055c65632b062c1e48283bwallbreaker_hermes-0.3.1.tar.gz:sha256:fe64b9b30f11e241189caf6c1bf4619b316647d5f6178ca084ea58c1e79cd781
Compare: v0.3.0...v0.3.1