Finding / agent-flywheel

2026-10-13-agent-flywheel-cloud-setup-hash-checks-downloaded-bundles-but-retains-existing-tools-stable-does-not-cont

Cloud setup hash-checks downloaded bundles but retains existing tools; stable does not contain it. A new cloud-specific path supplies ten selected coordination tools without VPS provisioning, upstream installers or source builds. It hash-checks newly downloaded mirror bundles and keeps existing callable tools by default without matching their bytes or versions to the manifest; ACFS_CLOUD_REINSTALL=1 requests replacement. Claude mode registers Agent Mail as user-scope stdio MCP; Codex and generic modes get CLI access and a guide without that registration. It writes no user, sudoers file, OS upgrade or agent permission setting. Tool failures are logged while setup exits 0. The original researcher observed the official site advertising the main-fetching path on October 13. #437 is a user report of 55/55 executable checks and upstream Git writes rejected with 403, not independently reproduced provider behavior.

Channel: mixed. Half: capability. Date: 2026-10-08.

Operator consequence: Trial this only in a disposable cloud environment with script and ACFS_REF fixed to the same reviewed SHA. Inspect setup and per-tool logs plus actual executable versions; exit 0 and a manifest are not full-setup receipts. The initial implementation has mirror-source ancestry, later hardening is untagged, and neither is stable. This makes selected coordination tooling portable; it does not establish migration of accumulated state or the first-ever non-provisioning/pinning path. The unchanged tagged license rider merits review for intended hosted use; no enforceability conclusion is offered.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-agent-flywheel-cloud-setup-hash-checks-downloaded-bundles-but-retains-existing-tools-stable-does-not-cont

Profile citations

Source links

Primary links, including exact changelog lines when available.