The runner's admit (internal/core/runner/proc.go) starts a harness binary resolved on PATH even when the binary, or the directory PATH reaches it through, is writable by group or other: a chmod 777 directory holding claude was admitted, so any account that can write there chooses what the loop runs with the person's credentials.

The runner's admit (internal/core/runner/proc.go) starts a harness binary resolved on PATH even when the binary, or the directory PATH reaches it through, is writable by group or other: a chmod 777 directory holding claude was admitted, so any account that can write there chooses what the loop runs with the person's credentials.

Grounds

• pursued: a chmod 777 PATH directory holding the fake, or a mode 0772 fake binary, is refused as absent naming group or other and never launched; a launch from either, or a 0755 system harness refused, would show it wrong