{"record":{"id":"3a2dab2138b9e39d","repo":"NousResearch/hermes-agent","slug":"plugin-policy-plugin-id-r-cannot-override-the-au","errorCode":null,"errorMessage":"Plugin {policy.plugin_id!r} cannot override the auth profile (set plugins.entries.{policy.plugin_id}.llm.allow_profile_override to true to allow).","messagePattern":"Plugin (.+?) cannot override the auth profile \\(set plugins\\.entries\\.(.+?)\\.llm\\.allow_profile_override to true to allow\\)\\.","errorType":"validation","errorClass":"PluginLlmTrustError","httpStatus":null,"severity":"error","filePath":"agent/plugin_llm.py","lineNumber":337,"sourceCode":"            and normalized not in policy.allowed_models\n        ):\n            raise PluginLlmTrustError(\n                f\"Plugin {policy.plugin_id!r} model override \"\n                f\"{requested_model!r} is not in plugins.entries.\"\n                f\"{policy.plugin_id}.llm.allowed_models.\"\n            )\n        final_model = requested_model.strip()\n\n    if requested_agent_id and not policy.allow_agent_id_override:\n        raise PluginLlmTrustError(\n            f\"Plugin {policy.plugin_id!r} cannot run completions against a \"\n            f\"non-default agent id (set plugins.entries.{policy.plugin_id}.\"\n            f\"llm.allow_agent_id_override to true to allow).\"\n        )\n\n    if requested_profile:\n        if not policy.allow_profile_override:\n            raise PluginLlmTrustError(\n                f\"Plugin {policy.plugin_id!r} cannot override the auth profile \"\n                f\"(set plugins.entries.{policy.plugin_id}.llm.allow_profile_override \"\n                f\"to true to allow).\"\n            )\n        final_profile = requested_profile.strip()\n\n    return final_provider, final_model, requested_agent_id, final_profile\n\n\ndef _resolve_task_ownership(plugin_id: str) -> tuple[frozenset, frozenset]:\n    \"\"\"Return ``(owned_keys, builtin_keys)`` for the task trust gate.\n\n    ``owned_keys`` are auxiliary-task keys ``plugin_id`` registered itself\n    via ``ctx.register_auxiliary_task``; ``builtin_keys`` are the host's\n    reserved auxiliary tasks. Both imports are lazy so plugin discovery\n    doesn't hit a circular import at module load. A registry that can't be\n    read yields empty sets, which fails the gate closed (unknown → rejected).\n","sourceCodeStart":319,"sourceCodeEnd":355,"githubUrl":"https://github.com/NousResearch/hermes-agent/blob/c896c09c42910c584c4c7d2325b58c14713ea42c/agent/plugin_llm.py#L319-L355","documentation":"Error \"Plugin {policy.plugin_id!r} cannot override the auth profile (set plugins.entries.{policy.plugin_id}.llm.allow_profile_override to true to allow).\" thrown in NousResearch/hermes-agent.","triggerScenarios":"Thrown at agent/plugin_llm.py:337 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Set plugins.entries.<plugin>.llm.allow_profile_override to true to permit the profile override.","Use the default auth profile for the plugin's completions."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"c896c09c42910c584c4c7d2325b58c14713ea42c","analyzedAt":"2026-08-14T17:18:01.089Z","schemaVersion":2},"datasetVersion":"2026-08-15T22:17:37.221Z"}