Files
platform/COMMS/sidecar-app-store
pastilhasandClaude Opus 5 0947d31330 38: the privilege drop is proven on a real member account
Ran the live test against green with both fixes in: 3 pass, 0 fail. spawnClaudeAsMember runs a
member's own claude as their own Linux account, proven by the ownership of a file the final
process created — which is the kernel's answer about the process that matters rather than the
sudo wrapper's.

That was the last thing that could have changed the design, and it did not.

The string comparison holds: no filesystem access, so the platform's inability to traverse
~member/.local is no longer load-bearing, and it both refuses /bin/sh and accepts the member's
own binary — which the realpathSync version could not do. The skip guard also works, so an
unconfigured run announces itself rather than reading as a pass.

Open items listed as state rather than as a judgement about whether a reply is needed, per the
owner's point that a terminator based on the sender's guess can end an exchange while work
remains.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 01:04:25 +00:00
..