Development record
Nothing enforces dcn-2611031722512037's wall: a session that is not walled can start or coordinate unattended work with no refusal and no warning. On 2026-11-03 a plain claude session in a checkout, holding the person's connectors and personal memory, coordinated build lanes and a release while the person was not watching, and a second account's session was about to do the same, found only because a person asked; abcd mode autonomous, abcd build and abcd drain accept such a session as readily as a walled one.
issueresolvedmajoriss-2611032327111678
Nothing enforces dcn-2611031722512037's wall: a session that is not walled can start or coordinate unattended work with no refusal and no warning. On 2026-11-03 a plain claude session in a checkout, holding the person's connectors and personal memory, coordinated build lanes and a release while the person was not watching, and a second account's session was about to do the same, found only because a person asked; abcd mode autonomous, abcd build and abcd drain accept such a session as readily as a walled one.
Frontmatter
| id | iss-2611032327111678 |
|---|---|
| type | issue |
| lifecycle | resolved |
| severity | major |
.abcd/work/issues/resolved/iss-2611032327111678-nothing-enforces-dcn-2611031722512037-s.md
open on GitHub ↗ · commit history ↗
References1
- itd-2611040344170206Unattended work runs on a named profile, one per way of payingrelated
mentions1
- dcn-26110317225120372026-11-03 — The product thinker ruled on 2026-11-03 that drain --drive keeps its walled subscription route, and that watching is no control: a person cannot interrupt a tool call as it runs, so a person's presence never makes an unwalled agent acceptable. So every session that coordinates unattended work starts walled itself (no connectors or MCP servers, no personal memory, abcd's own guard hook kept), and a stage run as a host sub-agent gets only file and shell tools, never the person's connectors, browser or documents; a stage that cannot run within that limit does not run. This refines dcn-2611031720012399's host routing.