mirror of
https://github.com/stablyai/orca.git
synced 2026-09-22 00:02:31 +00:00
Replace the helper-first recovery design with a two-layer plan: an in-daemon opendir verdict plus a notice on the existing attribution poll (ship now), and the helper probe for already-deployed old daemons (evidence-gated). Record the 2026-09-21 measurements: on Documents, access(2) passes while opendir gets EPERM, so the current accessSync verdict is blind to the incident's folder class; daemon-spawned login shells carry the daemon's grant; the login wrapper is unconditional in production.