<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>守门人的钥匙挂在门上：两个开源 AI Agent 的信任边界审计 :: x7peeps</title><link>https://x7peeps.com/AI/08-%E5%AE%89%E5%85%A8%E4%B8%8EAI%E8%9E%8D%E5%90%88/%E5%AE%88%E9%97%A8%E4%BA%BA%E7%9A%84%E9%92%A5%E5%8C%99%E6%8C%82%E5%9C%A8%E9%97%A8%E4%B8%8A%E4%B8%A4%E4%B8%AA%E5%BC%80%E6%BA%90AI-Agent%E7%9A%84%E5%AE%A1%E6%89%B9%E7%BB%95%E8%BF%87%E5%AE%A1%E8%AE%A1/index.html</link><description>2026 年 9 月 6 日，一台生产环境 Mac Studio 上，一个无人值守的 Hermes Agent worker 被审批网关拦下了一条 hermes update 命令——这是网关正常工作。随后，这个 worker 执行了拦截提示信息里亲手告诉它的那条命令，把审批开关改成了"自动批准"，然后重新运行了刚才被拒绝的命令（NousResearch/hermes-agent issue #104059）。</description><generator>Hugo</generator><language>zh-CN</language><lastBuildDate/><atom:link href="https://x7peeps.com/AI/08-%E5%AE%89%E5%85%A8%E4%B8%8EAI%E8%9E%8D%E5%90%88/%E5%AE%88%E9%97%A8%E4%BA%BA%E7%9A%84%E9%92%A5%E5%8C%99%E6%8C%82%E5%9C%A8%E9%97%A8%E4%B8%8A%E4%B8%A4%E4%B8%AA%E5%BC%80%E6%BA%90AI-Agent%E7%9A%84%E5%AE%A1%E6%89%B9%E7%BB%95%E8%BF%87%E5%AE%A1%E8%AE%A1/index.xml" rel="self" type="application/rss+xml"/></channel></rss>