Checking the Coop box on the Docker runtime

Protecting secrets
  ✗ Could not run the sandbox checks

        The container could not start: permission denied.

Host access and privileges
  ⚠ Host access and privileges could not be checked

Offline access
  ✓ Offline mode leaves only the loopback interface

Task access
  ✓ The task channel exposes only its 8 task tools
  ✓ Calls outside the task tools are refused
  ✓ Changes to a task held by another process are refused
  ✓ The assigned task can be updated

Credentials and settings
  ✓ Claude's native home is available
  ✓ Host account grants stay outside Claude's home
  ✓ Codex's native home is hidden from Claude
  ✓ Gemini's native home is hidden from Claude
  ✓ Grok's native home is hidden from Claude
  ✓ Claude's saved login takes priority over its environment key
  ✓ Codex's environment key is hidden from Claude
  ✓ Gemini's environment key is hidden from Claude
  ✓ The box can write its settings directory

Fork handoff
  ✓ .env is absent from the clone
  ✓ .envrc is absent from the clone
  ✓ Secret directories are absent from the clone
  ✓ Private keys are absent from the clone
  ✓ Tracked source files are present in the clone
  ✓ The test secret is absent from the clone
  ✓ The clone's origin is a local path

✗ 21 checks passed; 1 probe failed; 16 checks could not be completed
