Omar SobhandClaude Opus 5.5 eb1137ed68 fix(microvm): the relay URL must survive the login profile; deploy.sh must not ship a target symlink ...

- The first relayed kimi mission (01a0cfc3) bound the node relay, yet the guest
  dialled api.kimi.com through egress with the proxy token: the turn runs in a
  login shell that sources /etc/profile.d/00-image-env.sh (the image's ENV),
  which re-exports the glm/kimi images' baked ANTHROPIC_BASE_URL over ours. The
  turn command now re-exports the base URL after the profile. No key leaked —
  the guest had only the token — but relayed kimi/glm missions could not run.
- deploy.sh excluded `target/`, which matches only a directory; a workstation
  whose target is a symlink copied it to the build host, breaking its builds.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

2026-09-23 14:41:30 -05:00

..

src

fix(microvm): the relay URL must survive the login profile; deploy.sh must not ship a target symlink

2026-09-23 14:41:30 -05:00

tests

feat(judge): the judge commits to a verification plan before it reads the evidence

2026-09-20 22:07:39 -05:00

Cargo.toml

feat(llm-proxy): mission containers reach their models through a key-adding proxy (flagged)

2026-09-23 12:35:01 -05:00