DottaandPaperclip 6f75f7a59c ci(hermes): supply the selected Google qualification key ...

Map GEMINI_API_KEY only for the selected paid matrix credential. Extend the trusted-workflow credential checks to prevent ambient Google secrets in unapproved workflows. This fixes the reviewed Google cells startup failure.

Validation: all 15 workflow security tests, actionlint, and diff checks pass.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-10-08 12:28:11 -05:00

..

architecture

feat(runner): consolidate Cursor production integration (#15075)

2026-10-06 20:48:15 -05:00

assets

…

benchmarks

fix(tool-gateway): bound MCP discovery memory and concurrency (#14864)

2026-10-02 07:45:27 -05:00

connections

feat(runner): add native Hermes ACP qualification candidate

2026-10-08 12:07:09 -05:00

design

feat: add Browser Use Cloud connector and live task browsers (#14627)

2026-09-30 07:13:16 -05:00

experimental

…

logs

…

plans

ci(hermes): supply the selected Google qualification key

2026-10-08 12:28:11 -05:00

plugins

Add plugin lifecycle delivery and an initial resource baseline (#15343)

2026-10-06 12:27:09 -07:00

pr/5429

…

screenshots

feat(dot): complete onboarding and expand governed Runner capabilities (#15414)

2026-10-07 19:44:17 -05:00

spec

…

testing

…

acp-run-lifecycle.md

Preserve ACP bridge terminal evidence before disconnect (#15478)

2026-10-07 13:01:22 -07:00

adapter-model-audit-2026-09-22.md

…

adapter-model-audit-2026-10-02.md

fix(codex): gate models on the Codex CLI floor before the ChatGPT backend rejects them (#15399)

2026-10-07 10:37:55 -07:00

AGENT-ARTIFACTS.md

fix(ui): open text attachments in task tabs (#14297)

2026-09-29 16:40:10 -05:00

agent-commentary.md

feat: add internal agent complaints and suggestions (#15367)

2026-10-06 16:14:06 -05:00

agent-files.md

fix(claude-local): resume sessions across agent file working copies (#15437)

2026-10-07 06:48:19 -05:00

AGENT-IDENTITY.md

feat(security): add read-only customer-success inspection APIs (#15405)

2026-10-06 21:38:15 -05:00

agent-instruction-revisions.md

feat(agents): persist agent files across tasks without revision history (#14420)

2026-09-29 08:25:56 -05:00

agent-permission-defaults.md

fix(agents): grant configuration access by default (#15283)

2026-10-06 05:28:48 -05:00

agent-personas.md

…

AGENTCOMPANIES_SPEC_INVENTORY.md

…

ANNOUNCEMENTS.md

…

CHANNELS.md

…

CLI.md

…

CLIPHUB.md

…

cloud-build-readiness.md

ci: pin a checkout-independent Rust cache path so PR lanes hit master's cache (#14394)

2026-09-30 16:04:23 -07:00

cloud-ui-snippet.md

…

composer-stop.md

feat(ui): improve task composer controls and pending input (#14322)

2026-09-28 23:02:39 +00:00

connection-intents.md

…

CUSTOMER-SUCCESS-INSPECTION.md

feat(security): add read-only customer-success inspection APIs (#15405)

2026-10-06 21:38:15 -05:00

DATABASE.md

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

decision-models.md

feat: add company decision models with permission and cost controls (#15473)

2026-10-07 15:53:13 -05:00

DEPLOYMENT-MODES.md

fix(auth): keep Cloud tenants on the Cloud sign-in flow (#14407)

2026-09-28 13:45:27 -05:00

DEVELOPING.md

fix: retain the original repository for reused task workspaces (#15528)

2026-10-07 19:52:30 -07:00

DOCKER.md

feat(connections): add advanced provider setup and live browser qualification (#15341)

2026-10-06 15:21:22 -05:00

dot-runner-prototype.md

feat(runner): add experimental OpenAI Dot provider over MCP Events (#15402)

2026-10-07 19:11:50 -05:00

evals.md

test(hermes): qualify managed API accounts through the runner

2026-10-08 12:28:11 -05:00

execution-github-identity.md

…

execution-semantics.md

fix(native): resume connection tasks after approval decisions (#15471)

2026-10-07 14:43:07 -05:00

GOAL.md

…

grok-native-runner.md

fix(runner): include Grok support in public installs with sandbox prerequisites (#14024)

2026-09-28 14:54:44 -05:00

HERMES_GATEWAY_ONBOARDING.md

Explain refused local Hermes gateway connections (#15520)

2026-10-07 18:55:55 -07:00

HERMES_GATEWAY_SMOKE.md

…

html-artifact-previews.md

feat(ui): render HTML artifacts in a secure sandbox (#15447)

2026-10-07 09:01:05 -05:00

INSTALLING.md

…

ISSUE-PRIVACY.md

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

LOW-TRUST-PRESETS.md

fix(auth): allow scoped low-trust work and owner-chat instruction edits (#14870)

2026-10-01 15:42:40 -05:00

MCP-ACCESS-GOVERNANCE.md

fix: repair MCP validation and cancelled execution recovery (#14951)

2026-10-02 13:47:59 -05:00

MCP-DEMO-SCRIPT.md

…

mcp-discovery-performance.md

fix(tool-gateway): bound MCP discovery memory and concurrency (#14864)

2026-10-02 07:45:27 -05:00

MCP-RUNTIME-OPERATIONS.md

fix(heartbeat): validate native MCP gateway ownership (#14914)

2026-10-02 08:22:33 -05:00

memory-landscape.md

…

native-workspace-finalization-recovery.md

fix(runtime): finalize and recover sandbox workspace exports safely (#14402)

2026-09-28 10:57:32 -05:00

observability.md

fix: retain the original repository for reused task workspaces (#15528)

2026-10-07 19:52:30 -07:00

openai-dot-runner.md

feat(dot): complete onboarding and expand governed Runner capabilities (#15414)

2026-10-07 19:44:17 -05:00

OPENCLAW_ONBOARDING.md

…

preview-release-artifacts.md

…

PRODUCT.md

feat: add personal primary agents (#15470)

2026-10-07 13:53:46 -05:00

project-repositories.md

…

public-mcp.md

fix(mcp): personalize assistant connections and hide revoked grants (#15411)

2026-10-06 22:09:41 -05:00

PUBLISHING.md

…

README-draft.md

…

RELEASE-AUTOMATION-SETUP.md

ci: pin a checkout-independent Rust cache path so PR lanes hit master's cache (#14394)

2026-09-30 16:04:23 -07:00

RELEASE-CHECKLIST.md

…

RELEASE-NOTES-mcp-access-governance.md

…

RELEASING.md

…

run-log-events.md

Preserve bounded workspace sync diagnostics across RPC (#15481)

2026-10-07 12:22:53 -07:00

runner-api-tools.md

fix(runner): restore task monitors and durable timed waits (#15446)

2026-10-07 08:41:24 -05:00

runner-created-skills.md

feat(skills): let agents update company skills safely (#15049)

2026-10-03 12:37:55 -05:00

SEARCH.md

…

SECRETS-AWS-PROVIDER.md

…

SPEC-implementation.md

feat(runner): add experimental OpenAI Dot provider over MCP Events (#15402)

2026-10-07 19:11:50 -05:00

SPEC.md

feat(runner): add experimental OpenAI Dot provider over MCP Events (#15402)

2026-10-07 19:11:50 -05:00

standard-image-contract.md

…

STORYBOOK-DEPLOYMENT.md

…

TASK-WATCHDOG.md

…

TASKS-mcp.md

…

TASKS.md

…

TELEMETRY_WORKFLOW.md

…

UNTRUSTED-PR-REVIEW.md

…

workspace-restore-locks.md

Preserve remote work when required workspace restore fails (#15479)

2026-10-07 13:29:44 -07:00