runecho

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  bench/hookmutate/mutate.py, line 68

  return subprocess.run(["git", *args], cwd=REPO, capture_output=True, text=True)

  bench/hookmutate/mutate.py, line 92

  shutil.rmtree(SANDBOX, ignore_errors=True)

  bench/hookmutate/mutate.py, line 126

  p = subprocess.run(["git", "archive", "--format=tar", "HEAD"], cwd=REPO, capture_output=True)

  Show more

  bench/hookmutate/mutate.py, line 160

  p = subprocess.run(TEST_ARGS, cwd=SANDBOX, capture_output=True, text=True)

  bench/hookmutate/mutate.py, line 265

  p = subprocess.run(["go", "list", "-test", "-deps", "-f", "{{.Dir}}", TEST_PKG],

  bench/tokencost/measure.py, line 73

  p = subprocess.run([os.path.join(BIN, "runecho-guard"), "--hook-mode"],

  bench/tokencost/measure.py, line 106

  p = subprocess.run([os.path.join(BIN, "runecho-mcp")],

  bench/tokencost/measure.py, line 127

  p = subprocess.run([os.path.join(BIN, "runecho-ir"), "repo", "list"],

  cmd/runecho-guard/contract_test.go, line 364

  if out, err := exec.Command(args[0], args[1:]...).CombinedOutput(); err != nil {

  scripts/agent-eval/sandboxed_arm.py, line 130

  shutil.rmtree(work, ignore_errors=True)

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Serious

  accepts a host from input, with no fixed list in this file.

  NETWORK_HOST_FROM_INPUT

  cmd/runecho-guard/callshape_unenrolled_test.go, line 30

  const decl = "def fetch(url, timeout=10):\n return url\n"

  cmd/runecho-guard/callshape_unenrolled_test.go, line 55

  decl+"\ndef go():\n return fetch(\"u\", timeuot=5)\n", nil))

  cmd/runecho-guard/callshape_unenrolled_test.go, line 92

  decl+"\ndef go():\n return fetch(\"u\", timeuot=5)\n", nil))

  Show more

  cmd/runecho-guard/callshape_unenrolled_test.go, line 109

  decl+"\ndef go():\n return fetch(\"u\", timeout=5)\n", nil))

  cmd/runecho-guard/callshape_unenrolled_test.go, line 143

  const decl = "def fetch(url, timeout=10):\n return url\n"

  cmd/runecho-guard/callshape_unenrolled_test.go, line 152

  decl+"\ndef go():\n return fetch(\"u\", timeuot=5)\n", nil))

  cmd/runecho-guard/callshape_unenrolled_test.go, line 173

  const file = "def fetch(url, timeout=10):\n return url\n\nresult = configure(\n retries=3,\n)\n"

  cmd/runecho-guard/callshape_unenrolled_test.go, line 183

  _, raw, d := runHook(t, payloadOld(t, "Edit", py, " retries=3,", ` fetch=fetch("u", timeuot=5),`, "", nil))

  internal/guard/callshapedecl_test.go, line 295

  src := "\"\"\"Usage:\n\ndef fetch(url, retries=3):\n ...\n\"\"\"\n\ndef fetch(url, timeout=1):\n return url\n"

  internal/guard/callshapedecl_test.go, line 355

  src := "def outer(a):\n def inner(fetch, b=1):\n pass\n\ndef fetch(url):\n return url\n"

  internal/guard/extract.go, line 1084

  // or `fetch()` where `fetch` is a lambda arg) is not a hallucination, but neither

  internal/guard/jsparams_test.go, line 100

  fetch(url: string): Promise<void>;

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  internal/guard/extract_test.go, line 2697

  `/count(xs) + route("/:id").length;`, `/count(xs) + s.split(/,/).length;`, `this.#default / count(x) + load('/.env').length`} {

  internal/ir/skipped.go, line 470

  ".xml": true, ".plist": true, ".lock": true, ".log": true, ".env": true,

  internal/ir/skipped.go, line 503

  // and wrong for `.npmrc` and `.gitignore`, which are files and are not code.

  Show more

  internal/ir/skipped.go, line 507

  // a directory" - and started FAILING CLOSED: a commit touching `.npmrc` was

  internal/ir/skipped.go, line 524

  ".npmrc": true, ".npmignore": true, ".nvmrc": true, ".yarnrc": true,

  internal/ir/skipped.go, line 527

  ".dockerignore": true, ".env": true, ".envrc": true,

  internal/ir/skipped_test.go, line 1590

  // false block: `.npmrc -> <unreadable>/.npmrc` was recorded as `unreadable_dir`

  internal/ir/skipped_test.go, line 1591

  // - a directory reason, on a file - so a commit touching `.npmrc` failed closed.

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read.

  OBFUSCATION_FILE_OVER_READ_CAP

  docs/focus-hunt-2026-07-04-candidate-bugs.md, line 1

  # RunEcho Focus-Hunt Candidate Bugs - 2026-07-04 (severity-tagged 2026-07-05)

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit e2ddc8830a89. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked: 25 Oct 2026

Read how this letter is chosen