Edgar ArakelyanandClaude Opus 5.5 23b80c24a6 fix(environment): write exported capture copies readable by their owner only ...

The bundle's manifest.json and evidence.json are copies of captured
content, which can include values an application returned such as
session tokens. They are now written with mode 0600 regardless of the
caller's umask. The Dockerfile already copies them with --chown for the
runtime user, so the served environment can still read them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-19 08:55:26 -07:00

..

plan.md

feat(environment): export an environment manifest as an agent environment bundle

2026-10-18 19:43:09 -07:00

spec.md

fix(environment): write exported capture copies readable by their owner only

2026-10-19 08:55:26 -07:00

tasks.md

feat(environment): export an environment manifest as an agent environment bundle

2026-10-18 19:43:09 -07:00

verification.md

fix(environment): retry the bundle run once on public ECR's anonymous pull quota

2026-10-18 19:43:09 -07:00