[v0.19.0] [Hermes Agent] Is it stable?

[github-actions]

Stability Score Evidence — v0.19.0

v0.19.0 keeps collecting sharp edges: packaging gaps, state DB corruption, updater deadlocks, provider routing detours. The deploy room is now mostly coffee and incident notes.

Stability adjustments

Affected components

• acp
• approval-boundary
• attachments
• auth
• browser
• config-profiles
• context-engine
• dashboard
• dependencies
• desktop
• desktop-remote-gateway
• desktop-ui
• desktop-windows
• discord
• doctor
• feishu
• gateway
• google-chat
• installer
• macos-updater
• matrix
• mcp
• memory
• plugin-tools
• provider-routing
• runtime
• security
• session-history
• session-state
• skills
• telegram
• terminal
• version-metadata
• wechat
• weixin
• whatsapp
• windows-update

Evidence

Issue	Area	Type	Severity	Penalty	Reason
NousResearch/hermes-agent#71571	approval-boundary	kernel	5	-5	v0.19.0 webhook approval requests are delivered cross-platform but remain session-scoped, so dangerous-command gates cannot be approved safely from the delivered channel
NousResearch/hermes-agent#69764	attachments	kernel	5	-5	Windows Desktop 0.19.0 leaks host attachment paths into sandbox file orchestration, breaking access from the Docker/WSL environment
NousResearch/hermes-agent#68139	browser	tool-specific	5	-5	browser_tool timeout can orphan agent-browser/Chromium trees until long-lived gateways run out of memory.
NousResearch/hermes-agent#70480	dependencies	kernel	5	-5	v0.19.0 Docker image ships WAL-reset-vulnerable SQLite 3.46.1 with live kanban.db corruption fences under concurrent-worker load
NousResearch/hermes-agent#72108	dependencies	kernel	5	-5	v0.19.0 security audit reports high-severity advisories in locked dependencies, including cryptography, Pillow, Starlette, and multipart packages
NousResearch/hermes-agent#65868	desktop-ui	kernel	5	-5	Update from 0.18.2 to 0.19.0 correlates with repeated Desktop Rust-to-V8 IPC SIGTRAP crash loops and main-process aborts
NousResearch/hermes-agent#69016	desktop-ui	runtime	5	-5	Windows Desktop 0.19.0 renderer grows memory rapidly and is OOM-killed roughly every 60 seconds
NousResearch/hermes-agent#63977	security	kernel	5	-5	v0.19.0 still carries an overbroad exfil_curl context-scan pattern that can silently replace legitimate SOUL.md identity content
NousResearch/hermes-agent#68311	security	kernel	5	-5	PyPI 0.19.0 sdist ships live_system_guard self-test without conftest guard; running packaged tests can execute os.kill(-1, SIGTERM)
NousResearch/hermes-agent#72298	security	kernel	5	-5	v0.19.0 can expose Bitwarden-sourced credentials as plaintext in Telegram chat while filling login forms
NousResearch/hermes-agent#68474	session-state	kernel	5	-5	Desktop update to v0.19.0 can zero state.db, destroying the SQLite session database while reporting update success
NousResearch/hermes-agent#68858	session-state	kernel	5	-5	v0.19.0 in-place compaction plus broad FTS maintenance can saturate disk I/O and wedge gateway shutdown on large state.db
NousResearch/hermes-agent#74423	session-state	kernel	5	-5	Hermes 0.19.0 reproduces Kanban SQLite idx_events_* corruption under dispatcher bursts and concurrent short-lived CLI writes.
NousResearch/hermes-agent#72454	telegram	channel-specific	5	-5	Telegram gateway initialization hangs at attempt 1/8 with no timeout on Hermes 0.19.0.
NousResearch/hermes-agent#68517	auth	runtime	4	-4	Desktop against a v0.19.0 basic-auth remote gateway can misclassify auth as OAuth, leaving blank sign-in and unreachable Settings
NousResearch/hermes-agent#72198	context-engine	runtime	4	-4	v0.19.0 detects SOUL.md but does not inject it into the system prompt for local/custom Ollama provider sessions
NousResearch/hermes-agent#68346	dashboard	runtime	4	-4	Dashboard chat can fail after upgrade to v0.19.0 with WebSocket code 1006 reconnect loops
NousResearch/hermes-agent#72583	desktop	runtime	4	-4	Desktop boot fails after upgrade with backend 401 Unauthorized on Windows 10 / Hermes 0.19.0.
NousResearch/hermes-agent#72391	desktop-ui	runtime	4	-4	v0.19.0-era Windows Desktop can loop on WebSocket ready_send_failed after backend GIL stalls during startup
NousResearch/hermes-agent#70825	desktop-windows	packaging	4	-4	Windows Desktop builds for v0.18.2 and v0.19.0 can produce an invalid Hermes.exe that shows Electron help text instead of launching the app.
NousResearch/hermes-agent#72348	discord	channel-specific	4	-4	v0.19.0 multiplexed Discord profiles share process-global allow/deny gates, breaking channel/user isolation across profiles
NousResearch/hermes-agent#29866	gateway	runtime	4	-4	After updating to v0.19.0, gateway venv can miss certifi/cacert.pem, breaking Feishu/Telegram/WeChat message delivery
NousResearch/hermes-agent#70344	gateway	runtime	4	-4	Hermes 0.19.0 gateway can stay silently deaf after generic network loss because the reconnect watcher never starts after escalation
NousResearch/hermes-agent#71758	gateway	runtime	4	-4	v0.19.0 gateway can mark a crashed platform adapter fatal and stop retrying after a transient upstream outage
NousResearch/hermes-agent#69570	macos-updater	runtime	4	-4	v0.19.0 Desktop auto-updater cannot find a published macOS zip asset, leaving app updates permanently failed
NousResearch/hermes-agent#69663	macos-updater	runtime	4	-4	macOS 0.19.0 self-update can remain stuck at “An update is finishing…” even after hermes-setup exits successfully
NousResearch/hermes-agent#72069	mcp	runtime	4	-4	v0.19.0 uvx MCP keepalive failures can cascade into thousands of ClosedResourceError failures and long session stalls
NousResearch/hermes-agent#72070	mcp	runtime	4	-4	v0.19.0 leaves MCP server processes orphaned after session end, accumulating dozens of processes and significant RAM use
NousResearch/hermes-agent#66888	memory	kernel	4	-4	v0.19.0 still transports memory context with system-authority language inside user-role content, creating a trust-path risk
NousResearch/hermes-agent#72036	memory	kernel	4	-4	v0.19.0 memory tool reports a save but does not create or write MEMORY.md, leaving user memory silently unsaved
NousResearch/hermes-agent#68318	plugin-tools	runtime	4	-4	v0.19.0 plugin handlers using the historical single-args shape crash with unexpected task_id/session kwargs
NousResearch/hermes-agent#71710	provider-routing	runtime	4	-4	v0.19.0 gateway does not expand ${VAR} in model.default, so Telegram/Discord routes can pass a literal model name and fail
NousResearch/hermes-agent#70201	runtime	kernel	4	-4	v0.19.0 POSIX update path can hot-mutate a live runtime/venv while long-running web processes keep serving with skewed dependencies
NousResearch/hermes-agent#72408	runtime	kernel	4	-4	v0.19.0 malformed provider response diagnostics can crash on vars(response) for plain dict responses, masking the real provider failure
NousResearch/hermes-agent#70846	session-history	kernel	4	-4	v0.19.0 compaction can replace human-readable prior chat history with a summary, blocking later review/documentation
NousResearch/hermes-agent#73848	session-history	runtime	4	-4	Hermes Agent v0.19.0 in-place compression can leave CLI/worker sessions unendable, making sessions.auto_prune ineffective and growing state.db without bound.
NousResearch/hermes-agent#74287	session-state	packaging	4	-4	Hermes Agent 0.19.0 wheel-based installs omit hermes_state_* modules, so importing hermes_state fails and session/state store paths are disabled.
NousResearch/hermes-agent#68406	telegram	channel-specific	4	-4	Telegram retry exhaustion on a 0.19.0 field incident can remove the adapter without queuing background reconnect
NousResearch/hermes-agent#72272	terminal	runtime	4	-4	Official v0.19.0 --oneshot invocation can exit 0 while returning a non-answer that fails the fresh challenge contract
NousResearch/hermes-agent#69575	attachments	runtime	3	-3	Desktop 0.19.0 image uploads are unreachable from profile Docker sandboxes because configured terminal.docker_volumes are not applied
NousResearch/hermes-agent#69398	auth	channel-specific	3	-3	v0.19.0 per-profile PairingStore path change breaks upgraded Telegram authorization until pairing files are migrated
NousResearch/hermes-agent#69462	auth	runtime	3	-3	Clean macOS Desktop 0.19.0 install times out on the API Keys page while the backend is otherwise reachable
NousResearch/hermes-agent#71369	auth	runtime	3	-3	v0.19.0 remote basic-auth Desktop sign-in stores cookies but reconnect bootstrap fails with 401 no_cookie
NousResearch/hermes-agent#69727	browser	runtime	3	-3	Hermes 0.19.0 can conflict when multiple sessions control the browser simultaneously
NousResearch/hermes-agent#72068	config-profiles	runtime	3	-3	v0.19.0 setup/update/doctor can regenerate .env with filled optional API keys commented out, silently disabling tool backends
NousResearch/hermes-agent#62726	dashboard	kernel	3	-3	Fresh 0.19.0 repro confirms dashboard cross-tab session bleed and /new hangs can require full container restart
NousResearch/hermes-agent#69143	dashboard	runtime	3	-3	0.19.0 Docker per-profile gateway supervision makes dashboard/system/channel status report stopped while the profile gateway runs
NousResearch/hermes-agent#71514	desktop-remote-gateway	runtime	3	-3	v0.19.0 Desktop cloud/remote readiness loops on 401 from gated health endpoints instead of falling back to public status
NousResearch/hermes-agent#68321	desktop-ui	runtime	3	-3	Hermes Desktop 0.19.0 can drop all assistant messages from rendered chat after switching sessions while DB rows remain intact
NousResearch/hermes-agent#69907	desktop-ui	runtime	3	-3	Windows Hermes Desktop 0.19.0 can spawn Chromium utility children outside the single-instance lock, leaving degraded lifecycle state
NousResearch/hermes-agent#70598	feishu	channel-specific	3	-3	Hermes Agent v0.19.0 Feishu adapter fails in Docker because extra_ua_tags is unsupported by the installed lark-oapi.
NousResearch/hermes-agent#68387	google-chat	channel-specific	3	-3	Current Docker release v0.19.0 can connect Google Chat successfully while bot_user_id remains unresolved and no events are received
NousResearch/hermes-agent#72981	installer	runtime	3	-3	Managed Cloud v0.19.0 dashboard Honcho dependency install can fail with permission denied on an otherwise healthy instance.
NousResearch/hermes-agent#73084	mcp	runtime	3	-3	Dashboard chat MCP discovery on v0.19.0 can crash when signal.signal() runs from a worker thread.
NousResearch/hermes-agent#68393	memory	runtime	3	-3	Mem0 provider on 0.19.0 can write cron, flush, and subagent contexts despite the memory write-isolation contract
NousResearch/hermes-agent#68379	provider-routing	runtime	3	-3	Hermes Desktop 0.19.0 can fail provider/model initialization with missing is_provider_enabled import
NousResearch/hermes-agent#69470	provider-routing	runtime	3	-3	Qwen OAuth runtime-provider resolution fails on v0.19.0, preventing auth-failure fallback to OpenRouter
NousResearch/hermes-agent#70961	provider-routing	runtime	3	-3	v0.19.0 fallback_providers can route Anthropic-message providers to /chat/completions instead of /v1/messages while the primary path is correct.
NousResearch/hermes-agent#71923	provider-routing	runtime	3	-3	setup.runtime_check ignores fallback_model and can force onboarding while chat works on Hermes 0.19.0.
NousResearch/hermes-agent#69476	skills	runtime	3	-3	v0.19.0 PyPI wheel ships no bundled skills payload, forcing skills.sh installs down a missing/dangerous fallback route
NousResearch/hermes-agent#68465	telegram	channel-specific	3	-3	Telegram gateway on Windows 0.19.0 can remain stuck at Connecting to Telegram attempt 1/8 after clean run
NousResearch/hermes-agent#71069	terminal	runtime	3	-3	v0.19.0 terminal env snapshots can source a stale sibling install first, shadowing the running Hermes home in multi-install setups
NousResearch/hermes-agent#74267	windows-update	runtime	3	-3	Windows Desktop v0.19.0 self-update can falsely detect another Hermes process and abort even after a full restart.
NousResearch/hermes-agent#69471	config-profiles	tool-specific	2	-2	Honcho first-save config merge on v0.19.0 drops new fields into the wrong config dictionary
NousResearch/hermes-agent#70139	context-engine	tool-specific	2	-2	v0.19.0 external context engines are not retained across /new, dropping expected carry-over context for Telegram gateway sessions
NousResearch/hermes-agent#70679	desktop-remote-gateway	runtime	2	-2	Desktop v0.19.0 global remote mode hides the profile switcher even though /api/profiles returns profiles.
NousResearch/hermes-agent#52811	desktop-ui	runtime	2	-2	Hermes Desktop v0.19.0 project sidebar can duplicate conversations across branch/folder lanes, corrupting navigation counts
NousResearch/hermes-agent#68302	desktop-ui	tool-specific	2	-2	v0.19.0 dashboard sidebar session clicks do not switch chat while Skills & Tools is active
NousResearch/hermes-agent#68756	desktop-ui	runtime	2	-2	Desktop 0.19.0 startup can block about 11 seconds on /api/status due to eager plugin resolution importing lark_oapi on the event loop
NousResearch/hermes-agent#72441	doctor	runtime	2	-2	hermes doctor on v0.19.0 can hang indefinitely after checking state.db on active profiles with large tracking data.
NousResearch/hermes-agent#69090	matrix	channel-specific	2	-2	Matrix adapter on 0.19.0 only uses the default recovery key in multi-profile mode
NousResearch/hermes-agent#68943	provider-routing	tool-specific	2	-2	Provider/API removal on 0.19.0 can leave stale models visible and block newly-added provider models
NousResearch/hermes-agent#69208	provider-routing	tool-specific	2	-2	Hermes 0.19.0 receives HTTP 400 on multi-turn Gemini tool calls through Venice when thought signatures are stripped
NousResearch/hermes-agent#72351	provider-routing	tool-specific	2	-2	v0.19.0 auto-title sends unsupported temperature to direct GPT-5.6 routing and can lose automatic titles during CLI cleanup
NousResearch/hermes-agent#72421	provider-routing	runtime	2	-2	Azure Foundry auxiliary title/approval calls lose Entra auth and fail with HTTP 401 on Hermes 0.19.0.
NousResearch/hermes-agent#73693	terminal	tool-specific	2	-2	Hermes 0.19.0 as a Rider ACP agent on Windows hangs read_file and terminal tool calls during Git Bash bootstrap; direct CLI control test works
NousResearch/hermes-agent#68783	version-metadata	tool-specific	2	-2	Desktop package metadata remains stuck at 0.17.0 while the CLI is v0.19.0, confusing built app version identity
NousResearch/hermes-agent#59626	dashboard	tool-specific	1	-1	0.19.0 dashboard --status can mistake wrapper lifecycle commands for a running dashboard server
NousResearch/hermes-agent#68338	dependencies	tool-specific	1	-1	0.19.0 cryptography pin can conflict with environments upgraded to cryptography 49.0.0
NousResearch/hermes-agent#68392	desktop-ui	tool-specific	1	-1	0.19.0 lazy session.activate omits desktop_contract and can trigger a false backend-out-of-date warning
NousResearch/hermes-agent#68894	desktop-ui	tool-specific	1	-1	Desktop 0.19.0 audio playback can be interrupted when submitting prompts
NousResearch/hermes-agent#70101	desktop-ui	tool-specific	1	-1	v0.19.0 Desktop session switching can restore scroll position above the bottom after async content rendering
NousResearch/hermes-agent#68396	provider-routing	tool-specific	1	-1	0.19.0 accepts provider timeout shim text as a valid assistant completion instead of retrying/falling back
NousResearch/hermes-agent#49529	runtime	tool-specific	1	-1	hermes doctor still reports a false-positive venv entry point warning on the official 0.19.0 wheel
NousResearch/hermes-agent#58670	runtime	tool-specific	1	-1	0.19.0 still has hardcoded empty-response retry count, producing no-reply outcomes for flaky OpenAI-compatible providers
NousResearch/hermes-agent#70411	terminal	tool-specific	1	-1	Desktop git-review on Windows looks for Git in an obsolete path and errors on Hermes 0.19.0.
NousResearch/hermes-agent#71964	wechat	channel-specific	1	-1	WeChat Work / WeChat Desktop conversations split into duplicate sessions on Hermes 0.19.0.
NousResearch/hermes-agent#70792	weixin	channel-specific	1	-1	Weixin iLink image delivery on Hermes 0.19.0 fails at getUploadUrl with ret=-2, blocking outbound local media
NousResearch/hermes-agent#68128	whatsapp	channel-specific	1	-1	WhatsApp bridge spawn still fails under Windows no-breakaway job objects on Hermes 0.19.0.
NousResearch/hermes-agent#73797	windows-update	tool-specific	1	-1	Hermes Desktop 0.19.0 on Windows 11 shows the update error every time after clicking Update, leaving normal update flow unavailable without killing the process

Evidence gate notes

• Included this run: #74267, #70679, #74423, #72441, #73848, #72981, #70961, #70598, #73084 via deterministic include for explicit v0.19.0 affected/reproduced text.
• Included after manual review: #74287 (0.19.0 wheel install reproduction/import failure); #70825 (Windows desktop build explicitly reproduces on v0.19.0).
• Excluded/skipped this run: #73338 because later comments say the original pre_tool_call block path works on v0.19.0; #69663, #72198, and #72298 were already present in the version evidence.

Stats

• Evidence penalty: -283
• Vote penalty: website-calculated
• Score formula: website-calculated from data/settings.json

---

IsItStable.com — score-first release stability evidence