Evidence record / agent-flywheel
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-agent-flywheel-post-stable-root-runtime-permission-repair-had-a-user-controlled-symlink-race
Post-stable root runtime permission repair had a user-controlled symlink race. The prior post-stable repair let root chmod entries inside another user’s runtime tree. That owner could swap an enumerated path for a symlink before chmod and cause root to change the target’s permissions; the commit gives /tmp losing shared write access as an example. The fix skips root repair unless root owns the runtime, leaving user-owned repair to its owner. This is a conditional permission-change/denial-of-service mechanism, not a reproduced exploit or proof of remote code execution.
Channel: main-unreleased. Half: defect. Date: 2026-10-10.
Operator consequence: For main evaluations, inspect the runtime-owner guard before invoking update as root. Do not label stable vulnerable to a regression introduced after it.
Receipt
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-agent-flywheel-post-stable-root-runtime-permission-repair-had-a-user-controlled-symlink-race
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-13-agent-flywheel-post-stable-root-runtime-permission-repair-had-a-user-controlled-symlink-racegithub.com/Dicklesworthstone/agentic_coding_flywheel_setup/commit/57921111a17405bc709c2fdc841b5fb3d57785cctagged commit file2026-10-13-agent-flywheel-post-stable-root-runtime-permission-repair-had-a-user-controlled-symlink-raceDicklesworthstone/agentic_coding_flywheel_setup / scripts/lib/update.sh#L3666-L3681
Versioned source: run artifact