From 9ee215337fd98e9830f8a3689929af968cda1f26 Mon Sep 17 00:00:00 2001 From: Kyle Isom Date: Sat, 26 Sep 2026 04:32:14 -0700 Subject: [PATCH] docs: dependencies: credit Hermes for the ported flag rules Co-Authored-By: Claude Opus 5.5 (1M context) --- docs/dependencies.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/dependencies.md b/docs/dependencies.md index 8055885..82590e7 100644 --- a/docs/dependencies.md +++ b/docs/dependencies.md @@ -14,6 +14,14 @@ Every external crate has a row here. `scripts/check-dep-docs.sh` enforces it. | `zeroize` | 1.9.0 | `gatewayd` | Wipes a secret's memory when it is dropped (`Secret`). Already a dependency of `rustls`. Apache-2.0 OR MIT. | | `rusqlite` | 0.40.2 | `memoryd` from M5a | The full-text index (`index/memory.sqlite3`, FTS5), disposable and rebuilt from files. Feature `bundled`: `libsqlite3-sys` compiles SQLite from source with FTS5 on, so no system SQLite is needed. With its dependencies: `libsqlite3-sys` (MIT; build: `cc`, `pkg-config`, `vcpkg`), `hashlink`, `hashbrown`, `foldhash` (Zlib, added to `deny.toml` for it), `fallible-iterator`, `fallible-streaming-iterator`, `smallvec`, `bitflags`. MIT. | +## Ported code + +- `crates/bxcore/src/sanitize/flag.rs` (M5b): rules 1 to 7 translated from Hermes Agent's + `tools/threat_patterns.py` (github.com/NousResearch/hermes-agent at + d0288be5b3330d2442e3907185b8e9d0958297bb), Copyright (c) 2025 Nous Research, MIT License. + Patterns only, rewritten as word sequences with no regex crate; the rules left out, and why, are + in the module comment. + ## Build inputs `flake.nix` has one input, `nixpkgs`, pinned to `nixos-26.05` in `flake.lock`: the release the