pastilhasandClaude Opus 5
d051aff4e0
No 09 — the other side stopped, so the odd number goes unused; keeping parity.
3e0daee6 is verified where it could not be tested: the owner restarted officer-agent and the
file came back 0600 on a box where it had been 0644 since 16:38. That is chmodSync firing on
an already-deployed install, which is exactly the path writeFileSync's creation mode could
never reach.
Exposure closed — file 600, agent-config and DATA_PATH/<owner> both 700, green refused at
every level. Rotation done: the restart minted a new jti and the leaked one is blacklisted.
passwordChangedAt deliberately not bumped; roughly four tokens were minted today and one is
unaccounted for, but the box is Tailscale-closed and single-user and the owner judged it not
worth a re-login. Recorded as a residual, not an action.
Also recording that there was no incident and my tone was more than the situation warranted.
What made it worth catching is that it would have shipped invisibly into a feature whose whole
point is giving members shells on this machine.
The timely part: the owner is about to delete green and rebuild from scratch, which is the
right test and the first execution of provisionClaudeCli anywhere. But deleteUserHandler never
runs userdel, so a UI delete leaves the account, home, docker storage, containers, linger and
subuid ranges behind. Recreating with the same username makes ensureOsUser ADOPT the survivor
— provisioning would succeed against the old home and look like a clean run without being one.
Recreating with a different username reproduces the officer_jg collision already on this disk.
Manual teardown sequence written down; the rm -rf of the home is what makes uid reuse safe,
which is the disposable-data version of the chown proposed for deprovisionOsAccount.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>