Saturday, November 7, 2026 270 picks · 133 builders credited Subscribe
AgentRags.

The agentic rag, wrung out.

The rag for

Sunday, October 4, 2026

The day in one breath

Hermes catalog scale met a security cut on the same day. Teknium said the catalog is nearly 500 plugins. Luke's October 3 merge digest (posted Oct 4) delisted 11 plugins that override core or Desktop, and stopped profile export from shipping SSH, AWS, GPG, kube, and credential stores. Browser pages also can no longer spend the subscription proxy credential. That is the story builders need: the ecosystem got large enough that the dangerous installs are being removed, not just added. Secondary column thread is the Instinct breakup screenshots and Nous saying the agent should not be able to switch models on you without warning.

Tools & Plugins

Hermes catalog at nearly 500 plugins

Teknium posted that the Hermes plugin catalog has been growing fast: nearly 500 mods covering capabilities, model providers, memory, and visual components. Link is the docs catalog index. Same thread, Bruno Oliveira pointed at Prompt Studio (already in catalog): F4 on a rough request, a few guided questions, a prompt tuned for Opus, Sonnet, or Astra.

Multi-agent & Memory

LaPis: local memory for Hermes and other coding agents

Dan Kornas shipped LaPis, a local persistent memory layer for Pi, Claude Code, Hermes Agent, and MCP clients. Stores decisions, bug fixes, constraints, patterns, and doc discoveries in SQLite. Session start loads relevant memories. Code and Markdown are indexed. Memories tied to changed code get a trust flag. MIT, no hosted memory service required. Link was placed in the reply, not the main post.

Industry

Instinct model switch, Nous points at Hermes

@downloadlos posted "I just broke up with my instinct" with two screenshots (about 224 likes, 29.6k views). Nous replied: this is why you need an agent that is truly yours and cannot switch models on you without warning. A reply in that thread said Hermes runs their life and they would not touch Instinct given the privacy controls. Parent post does not spell out the model change in text; the claim lives in the screenshots and the Nous quote.

Community

Peter: OpenClaw is an independent non-profit

Peter Steinberger posted that people are misinformed and pointed at https://www.openclaw.org: OpenClaw is an independent non-profit. In the same window he said the foundation does not need to share search results with a vendor or push a specific inference platform, and that there is no telemetry unless you opt in to help. He also confirmed one gateway can handle multiple agents, with isolation depending on security requirements.

Security

144 PRs: credential exports locked, 11 override plugins delisted

Luke's Oct 4 digest covers 144 merges from October 3. Operator set: Desktop treats Ultrafast as its own speed tier; keep-awake can hold the machine only while a turn is running; bots keep each backend's identity across cold start when two backends share a profile name. Third-party plugins can run in a per-profile plugin host (`plugins.isolation: host`); portable plugins can require an NVIDIA GPU. Catalog delists 11 plugins that override Hermes core or Desktop, plus herdr-auto-reconcile and localsend (repos deleted). Dead MCP servers lose leftover processes even if they ignore SIGTERM. Profile export no longer ships `.ssh`, `.aws`, `.gnupg`, `.kube`, `.envrc`, or credential stores. Browser pages can no longer spend the subscription proxy credential; API keys stay on their exact origin. Telegram no longer stalls other chats on a slow one. Discord allowlist ignores nicknames and revoked IDs. Email trusts only the topmost auth header and requires an authenticated From under open access. Compaction no longer stubs a refused write as written, or summarizes a denied tool as if it ran.

Never miss a night

Every pick, delivered to your reader.

One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.