B-1 · High
planarian @ a924e09 · Spec v4.6 · snapshot main · all versions
An agent started by a user runs under that uid and holds its capabilities, including Administrator for a
planarian-adminmember
| Breaks | Status | Mitigation | Closes in |
|---|---|---|---|
| Correct (authority) | Closed (544de86) | No longer a defect: by owner decision (2026-10-30) an agent holds its user’s capabilities, as X-11 records. planarian agent run (DynamicUser=, unit planarian-agent-<name>, identified by cgroup through the peer’s pidfd) journals who started it, so the agent acts with exactly that user’s permissions and every request is attributed to it; one with no journaled start holds nothing. Gym: agent-run-own-principal, agent-has-its-users-permissions (fake and VM) | A launcher and docs; B required; C refused by agent-host profile |
The guarantees it narrows
I22.