Known issues
These are the known issues and limits as of the commit this documentation was checked against. Some are bugs, some are design limits.
Chosen model not applied after /setup
After /setup, the bot may keep calling an older model and fail with a 404.
Sandbox is not isolation
The builtin sandbox is a limited subprocess, not a container or VM.
Shell runs as the bot's user
The guard lists reduce mistakes but are not a boundary.
Vault file is plain JSON
Secrets are stored unencrypted in data/secrets_vault.json.
No chat way to store a secret
The vault has no chat command to add secrets yet.
Discord approval session is per channel
Allow Session applies to everyone in that channel.
Telegram drops pending updates at start
Messages sent while the bot was down are ignored.
Telegram replies are plain text
No formatting is applied.
Discord uses prefix commands
The slash command tree is synced but empty.
No inbound media
Photos and files sent to the bot are not read.
MCP connectors are not wired in
Config-only code exists. The agent loop does not use it.
Skill Market is not built
The market folder is a placeholder.
Sub-agents are notes
No second model runs. Records are lost on restart.
DNS rebinding in the page reader
Fixed in PR #22: each hop resolves once and connects to the checked address.
History shortening is not model-based
Old messages are replaced by a simple text summary.
No measured performance data
No benchmarks have been run.
Checked against the source at commit f4fd89f on 29 Oct 2026. Everything here is merged on the main branch; no release has been tagged yet. The source is private, so these pages are the public description.