Waiting for logout before login still left a race inside the handshake
A teardown injected during login defeated a one-time wait. An exclusion gate fixed the reproduction; the production trigger remained unknown.
·Updated
·6 mins
Authentication
2026
When the server must compute on confidential data, split the data by who may read it
End-to-end encryption fails when the server is the calculator. Disk encryption still lets the operator read everything. List what the computation needs, then give each reader its own zone and key.
·8 mins
Codex 401 in an agent shell: check credentials before blaming API key precedence
Codex showed a ChatGPT login in one shell but 401 in another. Compare launch contexts; a rejected API key does not prove OAuth shadowing.
·Updated
·3 mins