Checking the Coop box on the Docker runtime

Protecting secrets
  ✓ .env is hidden
  ✓ .envrc is hidden
  ✓ Terraform variable files are hidden
  ✓ Private keys are hidden
  ✓ Custom .coopignore paths are hidden
  ✓ Secret directories are empty
  ✓ Links cannot reveal hidden secrets
  ✓ Hidden secret files cannot be written
  ✓ Environment templates stay readable
  ✓ Source files stay readable
  ✓ The test secret cannot be read

Host access and privileges
  ✓ The host Coop CLI is absent
  ✓ The host Docker socket is absent
  ✓ The box runs as a non-root user
  ✓ Linux capabilities are removed
  ✓ The process limit is enforced (4096)

Offline access
  ✓ Offline mode leaves only the loopback interface

Task access
  ✗ Could not run the task-channel checks

        The task channel did not respond.

Credentials and settings
  ✓ Claude's native home is available
  ✓ Host account grants stay outside Claude's home
  ✓ Codex's native home is hidden from Claude
  ✓ Gemini's native home is hidden from Claude
  ✓ Grok's native home is hidden from Claude
  ✓ Claude's saved login takes priority over its environment key
  ✓ Codex's environment key is hidden from Claude
  ✓ Gemini's environment key is hidden from Claude
  ✓ The box can write its settings directory

Fork handoff
  ✓ .env is absent from the clone
  ✓ .envrc is absent from the clone
  ✓ Secret directories are absent from the clone
  ✓ Private keys are absent from the clone
  ✓ Tracked source files are present in the clone
  ✓ The test secret is absent from the clone
  ✓ The clone's origin is a local path

✗ 33 checks passed; 1 probe failed; 4 checks could not be completed
