Issues

• Read and integrate lessons

  mrjf/bands#44 · Filter by author mrjf opened on Jun 4, 2026

• How can bands be composed?

  mrjf/bands#43 · Filter by author mrjf opened on May 21, 2026

• Workdir IDs use Math.random() — predictable

  security
  mrjf/bands#31 · Filter by author mrjf opened on May 16, 2026
  

• Secrets briefly visible in /proc cmdline via base64 -d subprocess

  security
  mrjf/bands#29 · Filter by author mrjf opened on May 16, 2026
  

• /proc and /dev fully mounted in bubblewrap sandbox

  security
  mrjf/bands#28 · Filter by author mrjf opened on May 16, 2026
  

• IPv6 traffic is not filtered

  security
  mrjf/bands#27 · Filter by author mrjf opened on May 16, 2026
  

• Fake filesystem?

  mrjf/bands#10 · Filter by author mrjf opened on Apr 4, 2026

• Outer loop agent should not need to have access to secrets

  mrjf/bands#8 · Filter by author mrjf opened on Mar 30, 2026
  2