mirror of
https://github.com/stablyai/orca.git
synced 2026-11-15 18:37:24 +00:00
Neil
3f5f314efc
- orcad: only the owner's desktop may attach/settle; devices paired through a grant are listed by orca-sandbox-grant and refused (forks keep their offer's origin id) - desktop: per-workspace limits (3 waiting, 60/hour), always-allow runs one at a time and 30/hour, one banner per burst, refusal floods logged once a minute - dialog: commands over 20 lines refused; long ones must be scrolled to the end; agent name muted; Turn off for this workspace; read delay counts from when a prompt reaches the front - lookalike spaces and combining marks refused; settled events only close their own workspace's prompt - executor reports soon after the shell exits even if an escaped process holds the pipes; hard stop - audit log keeps 3 files, long commands stored as prefix + sha256 - rules expire after 30 days and are cleared when a shared workspace is allowed