Hermes Agent Patches Secret Redaction Leak and Windows Failure Misclassification

Two bugs were recently reported and patched in the open-source coding agent Hermes, both involving quiet, hard-to-detect failures. The first fix addressed a redaction gap where secrets such as API keys were not being fully scrubbed before appearing in logs or worktree metadata. The same commit also removed stale worktrees to prevent leftover state from one task bleeding into another. A second fix corrected a misclassification issue on Windows, where silent wrapped command failures were being wrongly reported as sandbox denials, potentially leading teams to loosen security permissions unnecessarily. Users who self-host the agent in environments handling production credentials are advised to apply these updates promptly.