During April 2026, Hata enhanced the NousResearch/hermes-agent repository by implementing per-user access control for plugin features. He introduced a mechanism to pass sender_id, derived from user_id, to the pre_llm_call plugin hook, enabling plugins to enforce individualized ACLs for operations such as knowledge base recall. For CLI sessions lacking a user_id, he set the sender_id to an empty string, supporting flexible policy enforcement and broader accessibility. This backend development work, primarily in Python, aligned plugin context with user and session identity, strengthening security and governance while maintaining usability across both authenticated and non-authenticated environments.