# Daily Hermes + AI Research Brief — 2026-05-22

## Important updates

- **Hermes v0.14.0 is the practical upgrade to track.** The May 16 “Foundation Release” adds `pip install hermes-agent`, much lighter/lazier installs, ~19s faster cold start, 180× faster browser CDP calls, native Windows beta, LINE + SimpleX, Teams wiring, LSP semantic diagnostics on write, `/handoff`, and an OpenAI-compatible local proxy for OAuth providers. This directly helps Atlas/Hermes portability, cron startup latency, and interop with Codex/Aider/Cline/Continue. Source: [Hermes Agent releases](https://github.com/NousResearch/hermes-agent/releases).
- **Hermes provider/routing surface keeps expanding.** v0.14 adds SuperGrok OAuth with grok-4.3 at 1M context, an OpenRouter Pareto Code router, first-class `x_search`, trusted `huggingface/skills` tap, and non-Anthropic `computer_use` via `cua-driver`. For Will: worth testing as alternate model routes for research/coding jobs without hard-coding one provider. Source: [Hermes Agent v0.14.0 release notes](https://github.com/NousResearch/hermes-agent/releases).
- **Security checks are moving into MCP-native agent workflows.** GitHub made secret scanning in the GitHub MCP Server generally available, so MCP-compatible agents/IDEs can scan current changes for exposed secrets before commit/PR and honor existing push-protection customization. Source: [GitHub changelog](https://github.blog/changelog/2026-05-05-secret-scanning-with-github-mcp-server-is-now-generally-available/).
- **Dependency scanning via MCP is now in public preview.** GitHub’s MCP Server `dependabot` toolset can return structured vulnerable-dependency results with package, severity, and fixed-version recommendations; it can also use Dependabot CLI locally for deeper post-commit diffing. This is a good pattern for Hermes tool/MCP guardrails around automated code edits. Source: [GitHub changelog](https://github.blog/changelog/2026-05-05-dependency-scanning-with-github-mcp-server-is-in-public-preview/).
- **Codex is pushing long-running goal mode + shared plugin bundles.** OpenAI’s Codex changelog for 2026-05-21 says Goal mode is no longer experimental across app/IDE/CLI, Appshots can send Mac window context to Codex, remote computer use supports locked Macs, and Business plugin sharing can bundle skills, app integrations, and MCP servers. Useful competitive signal for Hermes `/goal`, skills, remote agents, and reusable bundles. Source: [Codex changelog](https://developers.openai.com/codex/changelog).
- **vLLM’s Kubernetes docs remain a clean baseline for local/GPU agent infra.** The current deployment guide frames vLLM-on-K8s as a way to scale/manage ML models on GPU resources, with an OpenAI-compatible serving path elsewhere in the docs. This is relevant for Pi/local-swarm → GPU-cluster routing patterns. Source: [vLLM Kubernetes deployment docs](https://docs.vllm.ai/en/stable/deployment/k8s/).

## Actionable ideas for us

- [quick] Try `hermes proxy` locally as an OpenAI-compatible endpoint for one external coding tool, then note latency/auth rough edges.
- [quick] Add a pre-commit/PR checklist item for “ask agent to run MCP secret/dependency scan” on Hermes/Atlas repos where GitHub MCP is configured.
- [experiment] Compare Hermes `/goal` + Kanban against Codex Goal mode on the same long-running maintenance task; score recovery after restart, tool safety, and final diff quality.
- [watch] Track Hermes v0.14.x patches for Windows beta, browser CDP speedups, `computer_use`, and Teams/LINE/SimpleX gateway regressions before relying on them in production workflows.

## Worth ignoring

- Generic “agent ecosystem maps” and listicles unless they include concrete protocol/tooling changes or reproducible benchmarks.
- Consumer-only app demos around screenshots/mobile control unless they translate into reusable agent context-capture patterns for Hermes.

Saved to Obsidian: Atlas/Daily Research/2026-05-22 - Hermes AI Brief.md
