From d468bd37e756ebd5177750b1980fcd655a969772 Mon Sep 17 00:00:00 2001 From: Mengye Ren Date: Fri, 23 Oct 2026 12:33:38 -0400 Subject: [PATCH 1/2] README: an uncontained session can read your files; use a spend-capped key --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 943e06d..ace39c7 100644 --- a/README.md +++ b/README.md @@ -22,7 +22,9 @@ outerloop start `init` copies this repository into a git repository under the kernel's state directory, which stands in for GitHub: pull requests and their threads are records inside it. It asks for the model and its key. `start` runs the loop in -the foreground; stop it with Ctrl-C and start it again any time. +the foreground; stop it with Ctrl-C and start it again any time. Without a +container the author's session runs as your user and can read any file your +account can, so give it a spend-capped key. The first attempt ends within about half an hour, as a pull request or as a negative result in the research log. Review it from another terminal: From 01e7198dba6eb41e674b31687106b847553c4caa Mon Sep 17 00:00:00 2001 From: Mengye Ren Date: Sat, 24 Oct 2026 21:40:22 -0400 Subject: [PATCH 2/2] README: macOS sessions run under Seatbelt; the key caveat applies on Linux --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index ace39c7..94fdc6f 100644 --- a/README.md +++ b/README.md @@ -23,7 +23,8 @@ outerloop start directory, which stands in for GitHub: pull requests and their threads are records inside it. It asks for the model and its key. `start` runs the loop in the foreground; stop it with Ctrl-C and start it again any time. Without a -container the author's session runs as your user and can read any file your +container image the author's session runs as your user. On macOS a Seatbelt +profile limits what it can read and write; on Linux it can read any file your account can, so give it a spend-capped key. The first attempt ends within about half an hour, as a pull request or as a