{"id":"ship:2f4c84fb-865b-49f7-a858-3b4dfef25174","withdrawn":false,"project":{"slug":"devclone20-iirysframe","name":"devclone20","url":"https://heyresearch.xyz/project/devclone20-iirysframe"},"domain":"build","claimType":"GITHUB_RELEASE","summary":"0.5.4 — ITSandbox reaches the terminal, PILOT sessions get names","sourceType":"github","sourceUrl":"https://github.com/devclone20/cloneframe_app_executable/releases/tag/v0.5.4","publishedAt":"2026-08-31T20:35:16.000Z","detectedAt":"2026-09-03T21:10:47.158Z","precision":"EXACT","verification":"PUBLICLY_VERIFIED","countsAsBuilding":true,"countedAs":"counted","countedAsSentence":"Yes. It is one of the records HEY’s activity status is built from.","recordedAt":"2026-09-03T21:10:47.158Z","metadata":{"summary":"## 0.5.4 — 2026-08-31 ### ITSandbox reaches the terminal, fail-open The pty layer now recognizes an owner-enabled ITSandbox: when the sandbox is on (or a caller explicitly asks for it), a session's command line is wrapped in Seatbelt isolation and given its own workdir before it ever spawns — the shell-guard still runs on the original, unwrapped command first. If the sandbox module is missing or a wrap fails, the terminal falls straight through to a normal session: a sandbox fault can never take it down. The permission gate matches — an agent may read whether the sandbox fence is on, never swi","releaseVersion":"v0.5.4","prerelease":false},"sources":[{"evidenceRowId":"2434a1e5-e74e-4a4c-b61a-ebe77a3c9366","sourceType":"GITHUB_REPO","sourceUrl":"https://github.com/devclone20/cloneframe_app_executable/releases/tag/v0.5.4","observedAt":"2026-09-03T21:10:47.166Z","metadata":{"tag":"v0.5.4","prerelease":false}}],"disclaimer":"Public, source-backed activity HEY recorded. Still Building means verified activity through a tracked market drawdown — it is not a prediction, not a ranking by price, and not investment advice. Few projects meet Still Building or Under the Radar at any time; both are strict by design, and list responses carry the counts."}