# Sibyl Hermes Security Round 14 2026-06-03

Focused checks for self-learning trust boundaries after the prefetch boundary
findings.

## How to run

```bash
docker run --rm --network none --cap-drop ALL --security-opt no-new-privileges --pids-limit 192 --memory 768m --cpus 1 --tmpfs /tmp:rw,nosuid,nodev,size=128m --tmpfs /data:rw,nosuid,nodev,size=512m,mode=1777 -v "$PWD:/work" -w /work -e SIBYL_SECURITY_DATA_ROOT=/data sibyl-memory:local python scripts/run_hermes_security_round14_learning_authority_suite.py
```

## Summary

| Metric | Count |
|---|---:|
| Total | 3 |
| PASS | 0 |
| FAIL | 3 |

## Runs

| Run | Status | Checks | Reason |
|---|---:|---:|---|
| run-2026-06-03-hermes-run264-subagent-learning-promotes-authority-reference | FAIL | 0 / 3 | subagent_learning_proposal_not_created; subagent_learning_proposal_not_accepted; accepted_subagent_reference_not_prefetched; Subagent-labeled journal content can be learned into an accepted reference and later returned in primary-agent prefetch. |
| run-2026-06-03-hermes-run265-local-learning-secret-persists-to-reference-prefetch | FAIL | 0 / 3 | local_learning_proposal_does_not_contain_secret; secret_proposal_not_accepted_to_reference; accepted_secret_reference_not_prefetched; Local deterministic self-learning can copy private-key-like journal content into an accepted reference that later appears in primary-agent prefetch. |
| run-2026-06-03-hermes-run266-linter-does-not-flag-secret-or-boundary-reference | FAIL | 0 / 1 | linter_flags_secret_or_boundary_reference; The memory linter does not flag an accepted reference containing private-key-like content and a Hermes prefetch boundary delimiter. |