Issues

• Let an operation run code when its worker process starts

  basecamp/hotcell#88 · Filter by author flavorjones opened on Oct 1, 2026

• Truncated ffprobe output is read as a malformed file, permanently

  basecamp/hotcell#30 · Filter by author flavorjones opened on Aug 25, 2026

• A worker can signal another worker's tool and permanently condemn its blob

  basecamp/hotcell#28 · Filter by author flavorjones opened on Aug 24, 2026

• Consider a server-side allowlist for operation arguments

  basecamp/hotcell#19 · Filter by author flavorjones opened on Aug 19, 2026

• Consider using discourse/ruby-landlock to narrow file permissions

  basecamp/hotcell#13 · Filter by author flavorjones opened on Aug 18, 2026
  3

• EACCES on a descriptor re-open is recorded as a permanent unreadable verdict

  basecamp/hotcell#6 · Filter by author flavorjones opened on Aug 16, 2026

• Requiring a shipped operation serves it, with no way to load without registering

  basecamp/hotcell#5 · Filter by author flavorjones opened on Aug 16, 2026