Skip to content

v1.1 — review-driven hardening

Choose a tag to compare

View all tags
@erenciracioglu-dotcom erenciracioglu-dotcom released this 26 Jul 14:38
· 3 commits to main since this release
v1.1
a673333
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.1 — hardening pass in response to hendrixfreire/hermes-self-evolution-review.

Fixes

  • F1 (§1.5): SECURITY comment in scripts/execution-loop.sh expanded — the no-eval-of-markdown design choice (already in v2) is now explicit
  • F2 (§1.3): install.sh now touches every facts file referenced by prompts or scripts on first run (was missing enforcement-log.md, learning-log.md)
  • F4 (§1.4): scripts/execution-loop.sh drops the hardcoded known_arms list. _print_unused_arms() now reports only arms that have actually been dispatched
  • F5 (§1.8): portable date parser — GNU date -d, BSD date -j -f, then stat mtime fallback. Silent-failure path removed
  • F6 (§1.7): README §"Why this exists" softened — skill loader claim is a portability hedge, not a Hermes bug

Intentionally kept

  • Gardener cron (review §4 redesign proposed deleting; we disagree — agent entropy is real)
  • PROPOSAL_ONLY_AMEND=true default (constitution is human-only)
  • 4-job architecture (Evolution + Critic + Verifier + Gardener)

Thanks to @hendrixfreire for the thorough audit.

Assets 2
Loading