HANCORE-linux's review identified unauthenticated local access to phone-control endpoints and private profile exposure. areu01or00 replaced the direct endpoints with owner-only Unix sockets, tightened profile handling and isolated the underlying tunnel in a private network namespace. Subsequent fixes checked the live foreground app before actions, checked again after posting approval, and stopped watchers when their app left the permitted scope.
HANCORE-linux accepted the reviewed endpoint, profile, tunnel and app-scope fixes, while requiring manual setup for the local build, signed WebDriverAgent and Pi/model configuration. omacom/omarchy-plugin-marketplace#10915:issuecomment-6098467632 records that decision. The marketplace verification applies to the reviewed snapshot and is not a security audit.
