kyleandClaude Opus 5.5 ba369f82ba brokerd: refuse / and a symbolic link as a socket's directory ...

brokerd makes a socket's directory 0700. With a socket directly in / it would
chmod /, and through a symbolic link it would change the link's target. Both
are now refused at start with #brokerd-start-failed. Without the fix the link
case started and served, with the shared directory made private.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-22 21:44:29 -07:00

config

Extend on-device verification to the agent loop

2026-09-18 20:38:56 -07:00

crates

brokerd: refuse / and a symbolic link as a socket's directory

2026-09-22 21:44:29 -07:00

docs

brokerd: refuse / and a symbolic link as a socket's directory

2026-09-22 21:44:29 -07:00

scripts

Check that every runbook pointer has an entry

2026-09-22 20:25:40 -07:00

spike

Add M2b plan: ten tasks, tests, recordings and the first system prompt

2026-09-18 17:19:02 -07:00

tools

Record straylight's new slot layout: four slots over one 262144-token pool

2026-09-22 21:11:23 -07:00

.gitignore

Add M1 plan, given tests and fixtures, AGENTS.md and implementer log

2026-09-17 01:22:43 -07:00

AGENTS.md

Review M3a: accept with fifteen findings; record the server change

2026-09-22 20:48:43 -07:00

Cargo.lock

Add brokerd's configuration

2026-09-19 02:24:15 -07:00

Cargo.toml

Add SHA-256 to proto, wrapping the emsha crate

2026-09-17 14:11:51 -07:00

CLAUDE.md

Record that the M3a plan is ready, and how it was checked

2026-09-18 23:45:43 -07:00

deny.toml

Add Cargo workspace, crate skeletons and the gate

2026-09-17 06:45:02 -07:00

Makefile

Add the end-to-end test: loopd against the real brokerd binary

2026-09-22 20:25:40 -07:00

S

Description

sovereign personal agent harness

4.8 MiB

Languages

Rust 97.6%

Shell 1.1%

Python 1.1%

Nix 0.2%