dilim/hermes-agent
1
0 Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-11-06 05:17:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(catalog): review disclosure for hermes-gensyn-ree

Browse Source
This commit is contained in:
teknium1 authored and Teknium committed 2026-10-17 07:05:06 -07:00
1 parent 418ce00969
commit 963b4e7d50
1 file changed
+1 -1
Download Patch File Download Diff File Expand all files Collapse all files
plugin-catalog/hermes-gensyn-ree.yaml
+1 -1
View File
@@ -2,7 +2,7 @@ name: hermes-gensyn-ree
repo: https://github.com/TakeshiTGAL/hermes-gensyn-plugins
sha: 9325a7b15d815ca05983885ddd6615eae5f2b7a6
subdir: packages/ree
description: "ree_validate_receipt, ree_verify_receipt, ree_infer. Validate does not re-execute and does not stand behind text_output, finish_reason, token_count, model.name, or ree_version. Verify re-executes on CPU. Infer runs one of three small models and writes one receipt. Disclosure — Local image gensynai/ree:v0.8.0, not pulled. Your docker pull is consent to the REE-Binary-License. Verify and infer mount ~/.cache/gensyn and ~/.cache/huggingface; a token file there is visible; no token is passed in the environment; the network is not limited to Hugging Face. Approval every time. Refused: cron, yolo, approvals off, single-query, unattended, host isolation, a missing approval API, or a cut question. Validate uses network none, does not ask, and returns no receipt text. A gateway user can start containers on your Docker daemon. Disable with hermes tools. Choosing always does not cover the next call. No state under <HERMES_HOME>/plugin-data/hermes-gensyn-ree. Not a hostile-code sandbox. No cron is created."
description: "ree_validate_receipt, ree_verify_receipt, ree_infer. Validate does not re-execute and does not stand behind text_output, finish_reason, token_count, model.name, or ree_version. Verify re-executes on CPU. Infer runs one of three small models and writes one receipt. Disclosure — Starts containers from the local image gensynai/ree:v0.8.0 (pinned by digest) and never pulls it; running docker pull yourself is consent to the REE-Binary-License. ree_verify_receipt and ree_infer mount ~/.cache/gensyn and ~/.cache/huggingface read-write (a Hugging Face token file stored there is visible to the container; no token is passed in the environment), may download Hugging Face weights for any model a receipt names, and their container network is not limited to Hugging Face; they ask for Hermes approval on every call and refuse under cron, yolo, approvals off, single-query, unattended runs, host isolation, or when the approval API is missing. ree_validate_receipt runs with network none, does not ask, and returns no receipt text. Any person admitted to one of your gateways can call these tools and approve containers on your Docker daemon; disable per surface with hermes tools. Choosing \"always\" adds one config.yaml allowlist line per call and never covers the next call. New receipts and temporary work files are written under ~/.cache/hermes-ree; nothing is stored under HERMES_HOME. The container is not a hostile-code sandbox. No cron is created."
maintainer: TakeshiTGAL
tier: community
category: tools