Protect the host Claude launcher from native shadow updates #871

New issue

Closed

opened 2026-08-04 20:37:32 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-08-04 20:37:32 +00:00

Member

Problem

A native AOS shadow links host state into a leased home. Claude's background updater can rewrite the host ~/.local/bin/claude launcher with an absolute target inside that leased home. Once the lease is cleaned, the host launcher becomes a dangling symlink even though the downloaded version remains intact.

Acceptance

Native Claude shadows disable the background auto-updater while isolated.
Direct host Claude launches and other harnesses keep their existing environment.
The native workspace contract documents the containment.
Focused Go tests, static analysis, and the full pre-commit suite pass.

## Problem A native AOS shadow links host state into a leased home. Claude's background updater can rewrite the host `~/.local/bin/claude` launcher with an absolute target inside that leased home. Once the lease is cleaned, the host launcher becomes a dangling symlink even though the downloaded version remains intact. ## Acceptance * Native Claude shadows disable the background auto-updater while isolated. * Direct host Claude launches and other harnesses keep their existing environment. * The native workspace contract documents the containment. * Focused Go tests, static analysis, and the full pre-commit suite pass.

coilyco-ops referenced this issue from a commit

2026-08-04 20:39:36 +00:00

fix(aos): protect the host Claude launcher

coilyco-ops closed this issue

2026-08-04 20:39:36 +00:00

coilyco-ops referenced this issue

2026-08-04 20:48:02 +00:00

Investigate Forgejo gate failure for the Claude shadow guard #873