Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Evidence record / agent-flywheel

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-agent-flywheel-reviewed-plugin-installs-shipped-in-v0-10-0-for-third-party-plugin-archives-only

Reviewed plugin installs shipped in v0.10.0, for third-party plugin archives only. bun run plugin:install, run from a trusted checkout’s packages/manifest, previews by default and executes only with --yes and the exact --accept-plan fingerprint. The fingerprint binds archive provenance, the external review, the target OS, checksums, the selection, installer bytes and arguments, and a saved plan is never accepted as authority. The scope is narrow by design: target-user installs only, three baseline capabilities, root and current-user modules refused, default-enabled plugins refused. Installers run under setpriv --no-new-privs, which the doc says is not a filesystem or network sandbox. The flow does not touch the root installer, the bundled agents, the aliases or the Antigravity policy.

Channel: tagged-release. Half: capability. Date: 2026-10-03.

Operator consequence: This answers the profile’s watch item: the approval step reached a tag, and it covers third-party plugins, not the agents ACFS installs. Use it if you add tools beyond the stock stack. It provides an exact-plan approval path for these plugins; no complete historical review establishes a first-ever claim. Do not read it as a sandbox, and do not expect it to change cc, cod or agy.

Receipt

Finding metadata

Confidence
high

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-agent-flywheel-reviewed-plugin-installs-shipped-in-v0-10-0-for-third-party-plugin-archives-only

Profile citations

Source links

Primary links, including exact changelog lines when available.

  1. Agent Flywheel
    tagged commit file2026-10-13-agent-flywheel-reviewed-plugin-installs-shipped-in-v0-10-0-for-third-party-plugin-archives-onlyDicklesworthstone/agentic_coding_flywheel_setup / docs/operations/plugin-review-workflow.md#L1-L13tagged commit file2026-10-13-agent-flywheel-reviewed-plugin-installs-shipped-in-v0-10-0-for-third-party-plugin-archives-onlyDicklesworthstone/agentic_coding_flywheel_setup / docs/operations/plugin-review-workflow.md#L186-L193commit2026-10-13-agent-flywheel-reviewed-plugin-installs-shipped-in-v0-10-0-for-third-party-plugin-archives-onlygithub.com/Dicklesworthstone/agentic_coding_flywheel_setup/commit/655ad8fc336b0f15b8eaaec116a5c33127051aef

Versioned source: run artifact