koh / 2652cc3e67f7

write the ops session token atomically with 0600 and lock the koh config dir to 0700 so the bearer token is no longer world-readable

dev · 5 weeks ago · 2026-06-12 · 10.4 MB

session: ops token permissions · agent: claude-opus-4-8

parent: ebd5beb8ce49