Hermes Agent v0.13.0 adds durable Kanban and security fixes

Hermes Agent v0.13.0, labeled the Tenacity Release, shipped on May 7, 2026 with a large set of reliability, security, and workflow changes. According to the release notes, the project recorded 864 commits, 588 merged pull requests, 829 files changed, 128,366 insertions, and 282 issues closed since v0.12.0. The release also lists 295 community contributors, including co-authors.

The biggest feature is a durable multi-agent Kanban board. Hermes now lets users spin up boards where multiple workers can pick up tasks, hand them off, and close them out, with heartbeat checks, reclaim logic, zombie detection, per-task retry limits, and a hallucination gate to keep workers honest. The company describes it as a system that helps an AI team “actually finish” work rather than stall halfway through.

A related feature, /goal, keeps the agent focused on a target across multiple turns. The project says this is implemented as the Ralph loop, now exposed as a first-class primitive so the agent does not lose track of the task after a back-and-forth conversation.

Hermes also rewrote checkpoints in version 2. The new state persistence system adds real pruning and disk guardrails, which the release notes say removes orphan shadow repos and improves how long-running work is stored.

Session resilience is another major theme. Gateway sessions can now auto-resume after a restart, and the release notes say interrupted conversations are restored after gateway bounces, /update restarts, and source-file reloads.

On the security side, the release closes eight P0 issues, according to the notes. Secret redaction is now on by default, Discord role allowlists are scoped to the originating guild, WhatsApp rejects strangers by default, and TOCTOU windows were closed across auth.json and MCP OAuth. The browser also enforces a cloud-metadata SSRF floor, and hermes debug share redacts logs at upload time.

The release expands Hermes’ surface area as well. Google Chat becomes the 20th supported platform, and providers are now a pluggable surface through a ProviderProfile ABC and a plugins/model-providers directory. The notes also say seven locales ship for the static gateway and CLI messages: Chinese, Japanese, German, Spanish, French, Ukrainian, and Turkish.

Other additions include a new video_analyze tool for native video understanding on Gemini-compatible multimodal models, xAI Custom Voices as a text-to-speech provider with voice cloning support, and an MCP update that adds SSE transport, OAuth forwarding, and better handling for image results. The release notes also mention a post-write delta lint for Python, JSON, YAML, and TOML files, a no_agent cron mode for script-only watchdog jobs, and new allowlist settings across several messaging platforms.

Hermes Agent v0.13.0 is available now as the Tenacity Release, with its changes centered on finishing tasks, preserving state, and tightening security.