samiandClaude Sonnet 5
7514f5a4c4
The residual section claimed the leaf/component TOCTOU is "closed in practice by CORE's O_NOFOLLOW open of the final file". Verified: it is not — core/src/io/sparse_file.cpp:77 opens O_WRONLY|O_CREAT|O_CLOEXEC, no O_NOFOLLOW, no O_EXCL. Requested the flags from CORE via PKG/QA. Doc now states the residual is currently OPEN, names the file:line and flags checked and the date, says what actually limits exposure today (0700 parent dirs), and flags this as the boundary where a reader stops checking. Step 5 reworded the same way. Re-verify the flags when the CORE change lands. Co-Authored-By: Claude Sonnet 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01Upd9WhG9oppieig5nRDLig
Owner: lane DAEMON. See ../docs/agents/AGENT-DAEMON.md. Owns all state: RPC, scheduler, queues, SQLite, pairing.