Withdrawn as a July 2 signal: Agent Flywheel v0.7.0 was an intake baseline
The intake still established a useful operator posture: ACFS scripts a sophisticated multi-agent VPS, but v0.7.0 safe mode neither removes its dangerous agent shortcuts nor guarantees that passwordless sudo is absent.
What the corrected intake established
- At the intake tag, ACFS put Claude Code, Codex, Antigravity, shell tooling, coordination, update, and recovery machinery behind one installer. Several downstream installers still select upstream
latest, so this is a scripted front door rather than a reproducible dependency lock. - In v0.7.0, a safe-mode run skips ACFS's
NOPASSWDwrite but does not remove a rule left by an earlier vibe run or a provider image. It also installs a shared zsh file whosecc,cod,agy, andgmishortcuts select dangerous or always-proceed behavior. - The tagged LICENSE includes a non-standard OpenAI/Anthropic rider. Potentially covered operators should read it and obtain their own legal guidance; Frontier is not opining on interpretation or enforceability.
Primary sources
- github_release Agent Flywheel v0.7.0 was a pre-window update-reliability release Dicklesworthstone/agentic_coding_flywheel_setup / v0.7.0
- git_commit Agent Flywheel v0.7.0 was a pre-window update-reliability release github.com/Dicklesworthstone/agentic_coding_flywheel_setup/tree/edaee4f6ceff772d4f56d42eda65b1d659fead73
- commit_line_range Agent Flywheel's dangerous shortcuts are installed in both modes Dicklesworthstone/agentic_coding_flywheel_setup / acfs/zsh/acfs.zshrc#L526-L532
- tagged_raw_file Agent Flywheel's dangerous shortcuts are installed in both modes raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/v0.7.0/README.md
- commit_line_range Agent Flywheel's dangerous shortcuts are installed in both modes Dicklesworthstone/agentic_coding_flywheel_setup / install.sh#L5209-L5237
- commit_line_range Vibe mode writes passwordless sudo; safe mode does not revoke it Dicklesworthstone/agentic_coding_flywheel_setup / install.sh#L4861-L4870
- commit_line_range Vibe mode writes passwordless sudo; safe mode does not revoke it Dicklesworthstone/agentic_coding_flywheel_setup / scripts/providers/hetzner-cloud-init.yml#L41-L46
- tagged_raw_file The Antigravity DCG hook fails open when checks are indeterminate raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/v0.7.0/scripts/lib/agy_locked.py
- tagged_raw_file The locked Antigravity launcher restores ACFS policy on every run raw.githubusercontent.com/Dicklesworthstone/agentic_coding_flywheel_setup/v0.7.0/acfs.manifest.yaml
- tagged_commit_file The tagged ACFS license includes an OpenAI and Anthropic rider Dicklesworthstone/agentic_coding_flywheel_setup / LICENSE
- github_license_api_at_commit The tagged ACFS license includes an OpenAI and Anthropic rider api.github.com/repos/Dicklesworthstone/agentic_coding_flywheel_setup/license
Signal metadata
Source findings
- Agent Flywheel v0.7.0 was a pre-window update-reliability release 2026-07-02-agent-flywheel-v0-7-0-tagged-release
- Agent Flywheel's dangerous shortcuts are installed in both modes 2026-07-02-agent-flywheel-vibe-mode-dangerous-agent-aliases
- Vibe mode writes passwordless sudo; safe mode does not revoke it 2026-07-02-agent-flywheel-passwordless-sudo-vibe-default
- The locked Antigravity launcher restores ACFS policy on every run 2026-07-02-agent-flywheel-antigravity-locked-always-proceed
- The Antigravity DCG hook fails open when checks are indeterminate 2026-07-02-agent-flywheel-dcg-hook-fail-open
- The tagged ACFS license includes an OpenAI and Anthropic rider 2026-07-02-agent-flywheel-openai-anthropic-license-rider
Run: 2026-07-02-weekly-digest-2026-07-01_2026-07-02-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-07-02-agent-flywheel-assembly-layer-dangerous-defaults
Research evidence and publication history are open in the repository.