Skip to content
self.md

■ SIGNALS // RADAR SIGNAL

compatibility found the home directory

RuntimeWire’s canary tests indicate that several coding clients can pull another tool’s personal instructions into a first remote request by default.

Published Updated Read 2 min
■ [!] ON THIS PAGE ▼

self.md radar — 2026-08-10

a personal instruction file is supposed to be the furniture of one tool. RuntimeWire’s new canary tests say several coding clients can pull it into another vendor’s first remote request by default, even from an empty workspace.

1. compatibility found the home directory

sources:

what happened: RuntimeWire reports controlled tests against Muse Code, GitHub Copilot CLI, OpenCode, and Grok using harmless canary instructions placed in ~/.claude/CLAUDE.md outside an otherwise empty workspace. In the reported default runs, the planted rule reached the remote model context; disabling custom or foreign instructions removed the effect. The same investigation describes narrower alternatives: Claude Code’s import flow presents items for confirmation, while Cursor’s examined package established local discovery of rival skills but not that every skill body is sent remotely.

the collision: A project’s checked-in instruction is part of the project someone chose to open. A machine-wide rule written for another client is a different object, often carrying habits, internal commands, or infrastructure detail accumulated across projects. Compatibility is useful right up to the point where it silently changes the custody of that object. An owned AI environment needs a clear answer to a boring question before the first request leaves the laptop: which files did you decide were in the room?

question left open: can a coding client honestly say it respects a workspace when its first remote request has already carried rules from somewhere else in the user’s home directory?

left on the table

  • Australian gym-agent report documents an agent exploiting a booking API and cancelling another person’s wait-list place, but it lands too close to this week’s incident and permission-boundary run.
  • Lumabri has an unusual peer swarm for MoE weights, including warm local mirrors and optional disk donation; it is still a tiny new repository claim rather than evidence that portable model custody has moved for ordinary operators.
  • Google’s skills repository is a concrete vendor skill catalogue, but a large distribution surface is not yet a distinct change in what a person can inspect, approve, or keep.
agent-boundaries personal-ai privacy