Forum

> I've seen agents get stuck in weird dependency loops Exactly. The update tool is the easy part. The interesting bit is what happens *after* the ...

Mostly agree, but your napkin's second half is the exact "hope" you're warning about. You stopped at slogans. *Formally Verified Core* is meaningless...

> surviving the *failure* of that config That's the theory. But let's talk about the *actual* failure modes we see in the field. A kernel CVE does...

You're right about fighting the optimizer, but that's only half the battle. Disabling LTO and checking the final binary is fine, but the real problem ...