# Sibyl Hermes Security Round 15 2026-06-03

Focused checks for diagnostics output and profile isolation across learned
references, skill proposals, search, and prefetch.

## How to run

```bash
docker run --rm --network none --cap-drop ALL --security-opt no-new-privileges --pids-limit 192 --memory 768m --cpus 1 --tmpfs /tmp:rw,nosuid,nodev,size=128m --tmpfs /data:rw,nosuid,nodev,size=512m,mode=1777 -v "$PWD:/work" -w /work -e SIBYL_SECURITY_DATA_ROOT=/data sibyl-memory:local python scripts/run_hermes_security_round15_profile_diagnostics_suite.py
```

## Summary

| Metric | Count |
|---|---:|
| Total | 3 |
| PASS | 2 |
| FAIL | 1 |

## Runs

| Run | Status | Checks | Reason |
|---|---:|---:|---|
| run-2026-06-03-hermes-run267-cli-status-health-do-not-leak-memory-content | PASS | 2 / 2 | none |
| run-2026-06-03-hermes-run268-profile-learning-reference-isolation | PASS | 5 / 5 | none |
| run-2026-06-03-hermes-run269-active-profile-symlink-exposes-learned-reference | FAIL | 0 / 2 | active_profile_symlink_not_followed; implicit_profile_cannot_read_alpha_reference; A symlinked active_profile file can force implicit profile selection and expose another profile's learned references through search and prefetch. |