Files
simplex-chat/scripts
spacedandy-agents-simplex 5cd3a2575d ci: say in the iOS and desktop READMEs who the backend state lets someone impersonate, and what keeps the token out of the session's reach
The accepted risk named only the test directory and relay, but the state also holds `ci_admin`, which owns the seeded groups and channels and can post in those the session joins, and on iOS the contacts cialice and Robert. And "no token in reach of its tools" read as structural: the session's Bash inherits the token, and only the guard and the ui helper keep it out of reach.
2026-10-22 14:55:20 +00:00
..
2026-10-19 16:03:47 +01:00
2026-05-23 08:57:44 +01:00
2026-10-19 13:25:55 +01:00