Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Evidence record / heypi

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-account

Omitted runtime uses host Bash with access bounded by the service account. This corrects an older default claim; it is not an in-window change. runtime?.kind falls back to host. Omitting runtime logs security_runtime_unisolated and proceeds; explicit host() does not trigger that warning. File tools apply path checks, but host Bash can leave the workspace within the service account’s OS permissions. The workspace sits below the state root with encrypted secret records, memory and ledgers; secrets.key is at that root. The deployment checklist requires an explicit runtime choice, not a prohibition on trusted host execution.

Channel: preview-or-beta heypi 0.3.0-beta.2; not the legacy 0.1.3 defaults. Half: defect. Date: 2026-07-21 (historical beta.0 behavior); re-verified for the 2026-10-13 profile.

Operator consequence: Inspect missing runtime configurations and explicit host() use. Choose an isolation provider for model-directed commands that must not reach service-owned state. If using host execution, use a dedicated OS account and protect the state directory: encrypted values and their decryption key share the state root; anyone who can read both, including a complete backup, can decrypt them. Filesystem permissions and backup protection remain necessary. Selecting just-bash is explicit and still requires the dependency checks in sections 3, 11 and 13.

Receipt

Finding metadata

Confidence
high

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-account

Profile citations

  • heypi / claim / host-runtime-warning-not-block
  • heypi / claim / host-is-omitted-runtime-default
  • heypi / claim / state-key-and-ciphertext-share-root
  • heypi / posture / governance

Source links

Primary links, including exact changelog lines when available.

  1. heypi
    tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/src/runtime-tools.ts#L17-L27tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/src/app.ts#L1034-L1038tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/docs/configuration/runtimes.md#L8-L24tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/src/storage.ts#L45-L70tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/src/secrets.ts#L67-L95tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/docs/configuration/secrets.md#L17-L26tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/docs/guides/deployment.md#L11tagged commit file2026-10-13-heypi-omitted-runtime-uses-host-bash-with-access-bounded-by-the-service-accounthunvreus/heypi / packages/heypi/docs/configuration/runtime.md#L34

Versioned source: run artifact