All findings check out against the actual diff. Here's the review:
Correctness / Security bugs
1. Bash is not disallowed — the "read-only" claim is false (agent/src/mcpBridge.js:18-36…
This is a tiny, well-scoped config change, so a full review is quick.
Correctness
- Global scope is broader than the stated fix.
drop_params: trueat the top-levellitellm_settings…
Summary
Correctness bugs (confirmed against diff/commit message):
.env.example:50— hash-generation command still uses Python'scrypt.METHOD_SHA512, but the commit message…
Both findings check out against the actual diff and repo state. Here's the review:
Correctness bugs
**1. forward_client_headers_to_llm_api: true is set globally, affecting unrelated…
Code Review: Fix cross-agent reply cascade, route Hermes through LiteLLM
Correctness bugs:
docker-compose.yml:64—hermesnow pointsOPENAI_BASE_URLat `http://litellm:4000/v…
Reviewed the diff (docker-compose.yml only, +10/-5). The core fix — adding command: ["gateway", "run"] and disabling API_SERVER_ENABLED — is sound and well-justified by the commit message.…
Review summary
Correctness bug:
agent/src/matrixBot.js:49— claude-bot filters out messages addressed to Hermes (@hermesprefix) but never filters messages from Hermes's own bot…
The claims in the doc check out — agent/src/router.js exists and does the chat/code_task classification, and the prior commit confirms prefixes were dropped in favor of routing through…