The agentic rag, wrung out.
The rag for
DigitalOcean’s Managed Agents public preview with explicit Hermes support, combined with the ZeroSignal privacy plugin and the OpenAI-compatible API exposure. Together these three moves turn Hermes from a self-hosted project into a first-class citizen of both cloud runtimes and multi-app workflows while adding a real privacy layer. The security CVE is an important operational note but secondary to the platform expansion signal.
DigitalOcean launched Managed Agents in public preview. Users can run Hermes (alongside Claude Code, Codex, OpenCode, LangGraph or custom containers) inside isolated microVMs that pause when idle. Tools are exposed through a single governed Action Gateway / MCP endpoint. One cloud, one bill, persistent state across sessions.
Hermes can expose any configured agent (skills, memory, tools, files) via an OpenAI-compatible endpoint. Apps such as Codex, Cursor, Cline, Open WebUI and AnythingLLM can now call into a running Hermes agent—including one on a remote VPS—without leaving their UI. Recent update properly streams model reasoning so the client app can show thinking in real time.
Nat Friedman (Meta) stated publicly that Muse was built from scratch but is “definitely heavily inspired as a product by openclaw.” After using OpenClaw in January the team bought hundreds of Mac minis and fell in love with the pattern. Goal was a safer, scalable version of the same idea.
ZeroSignal is now in the official Hermes Plugin Catalog. It provides encrypted, privacy-preserving inference across 50+ models served by independent operators. No API keys, no accounts, no centralized prompt history. Context is encrypted on-device before leaving the machine.
Malicious `.git/config` with `core.fsmonitor` can fire when the agent refreshes git status after a user message. Full environment (including provider API keys) is exposed. Affects builds prior to commit f6234d0. Do not open untrusted repo archives. The 0.21.0 tag alone is not proof of the fix.
Paperclip now lets agents search and read team knowledge in Notion. Separately, the Connectors system lets operators set per-tool permissions: Off / Ask first / Allowed. Agents get only the access required for real work.
Never miss a night
One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.
