Files
privatae-bastion/docs/STATUS.md
T
Privatae 4f8285ef18
ci / personal-data (push) Successful in 4s
ci / test (push) Successful in 3m36s
ci / fuzz (push) Successful in 3m35s
bastion 0.60.0
2026-11-02 00:10:58 +00:00

3.0 KiB

Status: what works today, and what does not

Kept by hand; each line says where it was checked. "Run" means on a real, fresh machine. "Tested" means the tests in client-go, which CI runs on Linux. "Built" means it compiles and passes go vet for that system, and the logic it shares with Linux is tested there, but it has not run on that system yet.

On its own, with no Host

Linux macOS Windows
Install for the whole machine from your own account run (gate) built not run
--just-me, and the fall back where sudo cannot be used run built not run
Every AI agent, by its program or its connection to a model run built built
Who started each one (terminal, remote login, schedule, service, another agent) run built built
Claude Code: session title, permission mode, what it is running now tested read, not checked against the process's start time read, not checked against the process's start time
An agent's folder, git branch and start time run not read yet not read yet
Scheduled jobs that start an agent run (cron) built (launchd) built (Task Scheduler)
MCP tool servers and their problems tested built built
Changes since your baseline tested built built
Stop an agent with your code, from the console or stop run built built
An agent in another account asks (Waiting for you) tested, with two accounts built not built (the ask socket is Unix only)
The console from the owner's own account, no sudo run built the tray's approvals window only
Activity, report run built built
uninstall, keeping the audit log run built built
A notice when something is waiting none yet none yet the tray

Not detected yet

GitHub Copilot, Cursor's editor (Cursor's command-line agent is detected) and Windsurf: the bastion has no signature for them (agents.go). Session titles are read for Claude Code only; Codex, opencode, Gemini CLI, aider and goose sessions show their program, folder and tool servers.

With a Host

Everything in the README's Works with a Host: folders, models, terminals, ops, ship plans, backups, the memory mirror, coder runs and the service slot. Those are tested here and have run with Privatae's own Hosts; this file does not track them line by line.

Not built: pairing over the internet to a control plane you run yourself, and a relay image for one behind a home router.

Known problems

  • The bastion agent (folder search, a separate program) keeps the plain text it extracts from a shared folder's files in <folder>/.agent, inside the shared folder, where a sync client can copy it. The bastion never serves that folder. The fix moves it under the bastion's own state.
  • There is no MCP endpoint on the bastion, on purpose. An agent on the machine uses the command line (for agents).