folder_openProject schedule1 min read update3 Nov 2026

Supported Versions

We release patches for security vulnerabilities. Which versions are eligible for receiving such patches?

VersionSupported
1.22.x✅
< 1.22❌

Reporting a Vulnerability

Please report (suspected) security vulnerabilities to hello@mistrysiddh.com. You will receive a response within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity but historically within a few days.

Please do not disclose the vulnerability publicly until we have had an opportunity to address it.

We appreciate your efforts to responsibly disclose your findings and will make every effort to acknowledge your contributions.

Vault hygiene

  • Never commit real vault content back into this template repo — Daily/, Memory-Review/* (except TEMPLATE.md), Research/* (except README.md), .smart-env/, and all .obsidian/plugins/*/data.json files are already git-ignored for exactly this reason.
  • The Local REST API plugin generates its own API key on first enable — store it via your Hermes agent’s protected env (hermes config set env.OBSIDIAN_REST_API_KEY "..."), never as a plaintext note in the vault.
  • Run only one session-archiving cron job per vault — concurrent writers to Daily/manifest.jsonl will race and corrupt the index.