mirror of
https://github.com/NousResearch/hermes-agent.git
synced 2026-10-28 13:32:02 +08:00
Add tests that a token-authenticated listener still serves a foreign Host, that malformed Host values fail closed, and that a no-token POST without a Content-Type is refused. Give the no-token Host rule its own README bullet and document every 403 refusal message.