The job runner launched its helpers by bare name; binary planting into a writable PATH entry fed an elevated prompt was the round-4 finding. Fetched files were already sha256-checked before use (fetch and shard-benchmark refuse a job without a 64-hex sha256 at parse time, fetch_file verifies before the rename). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| igneum-app | ||
| mac | ||
| windows | ||