April 2026 performance summary for NousResearch/hermes-agent: Focused on hardening the gateway approval workflow. Delivered a critical security fix to prevent privilege escalation by correcting the handling of the 'once' approval option, ensuring commands execute only for a single run and matching CLI semantics. This change eliminates a potential path for persistent approvals and aligns server behavior with client expectations, reducing risk and support issues. The fix was implemented in commit ef3bd3b276cd72b444db573e4147961b9041d0ec. Overall, this strengthens security posture, improves reliability, and demonstrates careful code-level security engineering. Technologies/skills demonstrated include security-focused code changes, cross-component alignment, and precise change impact analysis.