Security, Science & Hardware

The author closed a Windows PATH-hijack hole in oh-my-claudecode (omc). An earlier fix (#4726) set NoDefaultCurrentDirectoryInExePath=1 for team workers only, but the hook runner,

Built a fork of the OpenCode desktop app (DynWork) that connects to systemprompt 0.76 instances. The sign-in screen now runs on real auth: personal access token, one-time code, or

The author ran a wiring review of TLS, port binds and loopback in a Rust agent harness (cg-agent-harness) after a prior audit, and found one gap expressed in two places: loopback t