trust-boundaries 15
- OpenShell's auto-approval sees new methods, not wider paths
- Cloudflare OS simulates approvals, but never for MCP writes
- Octop's Shell Guard Logs Risky Matches; POSIX Root Is `/`
- mini-AGI's forgetting fix is measured on reading, not on chat
- CodeBurn's $15 hard cap denies tools when it could stop Claude
- OpenOcta's LICENSE is GPL-3.0 again, its README says Apache-2.0
- LLM Space guards plugin settings with 0600 but not its API keys
- OpenConnector Declares Its Own Defaults Out of Scope
- Gensee Crate's Defense Rate Is the One Number You Cannot Recount
- SkillHub's Security Scanner Blocks on Crash, Not on Verdict
- CAO's Honest Trust Boundary and Its Phantom Auth Switch
- Ouroboros Preaches Agency and Ships Owner-First Custody
- Open Science's Provenance Engine Would Reject Its Own #1 Badge
- Archify Source Audit: The Viral Diagram Skill Is Really a Distrust Stack
- God's Eye View: The Viral Globe Is the Demo. The Boundaries Are the Product