SecuritySunday, October 4, 2026
144 PRs: credential exports locked, 11 override plugins delisted
Luke's Oct 4 digest covers 144 merges from October 3. Operator set: Desktop treats Ultrafast as its own speed tier; keep-awake can hold the machine only while a turn is running; bots keep each backend's identity across cold start when two backends share a profile name. Third-party plugins can run in a per-profile plugin host (`plugins.isolation: host`); portable plugins can require an NVIDIA GPU. Catalog delists 11 plugins that override Hermes core or Desktop, plus herdr-auto-reconcile and localsend (repos deleted). Dead MCP servers lose leftover processes even if they ignore SIGTERM. Profile export no longer ships `.ssh`, `.aws`, `.gnupg`, `.kube`, `.envrc`, or credential stores. Browser pages can no longer spend the subscription proxy credential; API keys stay on their exact origin. Telegram no longer stalls other chats on a slow one. Discord allowlist ignores nicknames and revoked IDs. Email trusts only the topmost auth header and requires an authenticated From under open access. Compaction no longer stubs a refused write as written, or summarizes a denied tool as if it ran.
Why it matters
This is the day after the memory-provider split. The useful change is the catalog getting cut the same week it got huge, plus exports that no longer pack home-directory secrets.
