惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

S
Schneier on Security
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
T
Threat Research - Cisco Blogs
C
Cyber Attacks, Cyber Crime and Cyber Security
C
CXSECURITY Database RSS Feed - CXSecurity.com
A
Arctic Wolf
Security Latest
Security Latest
Simon Willison's Weblog
Simon Willison's Weblog
I
Intezer
cs.CV updates on arXiv.org
cs.CV updates on arXiv.org
T
Troy Hunt's Blog
Latest news
Latest news
Help Net Security
Help Net Security
S
Security Affairs
Webroot Blog
Webroot Blog
The Hacker News
The Hacker News
AI
AI
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
T
Tor Project blog
Forbes - Security
Forbes - Security
Google DeepMind News
Google DeepMind News
AWS News Blog
AWS News Blog
Attack and Defense Labs
Attack and Defense Labs
P
Proofpoint News Feed
www.infosecurity-magazine.com
www.infosecurity-magazine.com
H
Help Net Security
L
Lohrmann on Cybersecurity
S
SegmentFault 最新的问题
Google Online Security Blog
Google Online Security Blog
MongoDB | Blog
MongoDB | Blog
Cyberwarzone
Cyberwarzone
The Last Watchdog
The Last Watchdog
S
Securelist
N
News and Events Feed by Topic
S
Secure Thoughts
F
Fortinet All Blogs
博客园_首页
C
Cybersecurity and Infrastructure Security Agency CISA
量子位
M
MIT News - Artificial intelligence
F
Full Disclosure
T
The Blog of Author Tim Ferriss
T
Tailwind CSS Blog
Recent Commits to openclaw:main
Recent Commits to openclaw:main
Microsoft Security Blog
Microsoft Security Blog
I
InfoQ
P
Privacy International News Feed
L
LangChain Blog
Know Your Adversary
Know Your Adversary
C
CERT Recently Published Vulnerability Notes

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Hermes Agent: First Contact
Rob · 2026-06-02 · via DEV Community

Rob

Someone recommended I look at Hermes Agent as an alternative to OpenClaw. I've been running OpenClaw on the homelab since early May — it drives a Discord bot backed by Qwen 3.6 on an RTX 5090, with MCP tools wired into a fitness tracker. It works, mostly. The "mostly" is why I was open to alternatives.

What I expected: a quick install, a side-by-side comparison, a blog post with a verdict. What I got instead was a research rabbit hole that changed my understanding of why my existing setup had been flaky in the first place.

What Hermes Actually Is

Two things from the same org (Nous Research):

  1. Hermes Models — fine-tuned LLMs trained specifically for function calling, with native <tool_call> tokens baked into the weights. The model knows the tool-calling grammar because it was trained on it.
  2. Hermes Agent — a Python-based agent framework with 90+ built-in tools, a skills/learning system, and integrations for 25+ messaging platforms.

The key difference from OpenClaw: vertical integration. Nous Research makes both the model and the framework. The model was trained on the agent's tool schema. OpenClaw treats the model as a black box — plug in any OpenAI-compatible endpoint and go. Hermes pairs the model with the exact format it was trained to produce.

That distinction sounded like marketing until the research phase made it concrete.

The Install

One-liner installer, clean enough. It provisions its own Python, pulls 90 skills, detects my existing OpenClaw installation and offers a migration preview. The migration is thoughtful — it shows what it would import (soul config, memories, Discord settings, MCP servers) and warns about semantic mismatches. I skipped it. Importing OpenClaw's personality into Hermes would muddy any comparison.

The rough edges are in the setup wizard:

  • Portal login ambush. The first thing the wizard does — even after selecting "Quick setup" — is open a browser to the Nous Portal pricing page. If you're running local inference, this is confusing. You don't need an account. But there's no obvious "skip" button. You Ctrl+C out, which feels like you're breaking something.

The Nous Portal pricing page that opens unbidden during setup

The Portal login flow — Ctrl+C is the only way out

  • Sudo password storage. It asks if you want Hermes to store your sudo password for running apt commands. I said no. Don't want an agent framework I'm evaluating holding root credentials.
  • Default model display. After setup, it shows anthropic/claude-opus-4.6 as the current model — even though no API key is configured and no cloud provider is connected. Misleading.

None of these are dealbreakers. They're first-impression friction that an open-source project with 172K GitHub stars could smooth out. The install itself took about ten minutes, model download included.

The 25+ messaging platform selection list — we configured zero of them

The Research That Changed Everything

Before running any comparison, I wanted to pick the right models. The obvious plan: OpenClaw runs Qwen 3.6 (my daily driver, the model it's been using for weeks), Hermes runs Hermes-4-14B (its native model). Each framework gets its best model. Fair fight.

Then I started reading GitHub issues.

There's an open llama.cpp issue titled, with admirable directness, "qwen3.6-27b not work with openclaw." The problem is in how llama.cpp handles Qwen's tool-call format.

llama.cpp's tool-call autoparser recognizes three formats:

Format How It Works Models
JSON_NATIVE Pure JSON tool calls Cleanest, fewest bugs
TAG_WITH_JSON Function name in XML tag, arguments as JSON Hermes models
TAG_WITH_TAGGED Everything in nested XML tags Qwen models

Qwen uses TAG_WITH_TAGGED — the most complex format. Tool calls look like <tool_call><function=name><parameter=key>value</parameter></function></tool_call>. Multiple open issues describe parser failures, tool calls leaking into reasoning blocks, and permanently wedged conversations when parameters contain arrays.

I built a compatibility ranking across every model on the homelab:

Model Format Tool-Call Reliability
Hermes-4-14B TAG_WITH_JSON ★★★★★
Gemma 4 Custom parser ★★★★☆
Devstral Mistral format ★★★☆☆
Qwen 3.6 TAG_WITH_TAGGED ★★☆☆☆
Qwen3-Coder TAG_WITH_TAGGED ★★☆☆☆
DeepSeek R1 Unicode delimiters ★☆☆☆☆

Qwen — my daily driver, the model I'd been running with OpenClaw for three weeks — ranked fourth out of six for tool calling. The flaky behavior I'd attributed to "OpenClaw being finicky" or "memory-core having bugs" may have been Qwen's tool-call format failing to parse all along.

The Bootstrap Problem

More community research surfaced a second issue. OpenClaw's default bootstrap injects ~27,000 characters of system prompt — agent identity, tool schemas, conversation rules. Models at 14B parameters or below can't handle it. They hallucinate tool use as text instead of emitting structured calls.

The fix documented in the issue tracker: slash bootstrapMaxChars from 12,000 to 1,500. That's an 88% reduction in system prompt for the model to chew on before it even sees the user's message.

The Experiment Design

The research inverted the original plan. Instead of "each framework gets its native model," both agents will run Hermes-4-14B. Same model, different frameworks. That isolates the framework variable — any performance difference is the orchestration, not the weights.

Five tasks, escalating complexity, all via Discord against a fitness-tracker MCP server:

Task Tests
List last 5 workouts Basic single tool call
Sync Peloton → weekly count → goal pace Multi-step tool chain
"How am I doing?" Ambiguous intent, tool selection
Delete a fake workout ID Error handling and recovery
Full 2025 fitness trend analysis Multi-turn agentic reasoning

Task 5 opens into a 2×2 matrix — both agents on both Hermes-4 and Qwen 3.6 — to measure how much the model format matters versus the framework.

One deliberate asymmetry: Hermes keeps its memory and learning loop active across all five tasks. OpenClaw's memory-core is disabled due to an upstream bug. This isn't a controlled variable — it's a real product difference. We're testing each agent at its best available configuration, not at its lowest common denominator.

What I Learned Before Testing Anything

The most useful discovery came before running a single experiment. I'd been blaming OpenClaw for flaky tool calling. The actual culprit was probably Qwen's TAG_WITH_TAGGED format — deeply nested XML that llama.cpp's parser struggles with. The memory_search hangs I'd attributed to a memory-core bug? Possibly Qwen's tool calls never parsed correctly in the first place, leaving the chain dangling on an await that could never resolve.

Vertical integration isn't just a marketing story. When the model is trained on the exact tool-call format the agent expects, you skip an entire class of parsing bugs. Hermes-4-14B produces TAG_WITH_JSON — function name in a tag, arguments as clean JSON. llama.cpp strips the wrapper and passes it through. No nested XML, no parameter tags, no parser edge cases.

Whether that translates to better real-world performance is what the bakeoff will answer. But the prep work already taught me something: the model I thought was working was only partially working, and I wouldn't have known without researching a replacement.

By the Numbers

  • 1 GitHub issue titled literally "qwen3.6-27b not work with openclaw"
  • 6 models evaluated for tool-calling compatibility
  • 3 tool-call formats in llama.cpp (JSON_NATIVE, TAG_WITH_JSON, TAG_WITH_TAGGED)
  • 27,000 chars — default OpenClaw bootstrap prompt; 1,500 — recommended for ≤14B models
  • 90 skills bundled with Hermes Agent out of the box
  • 25+ messaging platforms supported (we configured zero of them)
  • 10 minutes from download to installed
  • 0 experiments run — and still the most useful research session of the week