← Back to journal
Runtime / June 4, 2026

Coding Agent Security: What Runtime Mode Limited Means

The agent runtime safety boundary is useful today, but its interception limits must remain explicit.

What the runner does

Termyte can prepare a local session and launch supported agents:

termyte run codex
termyte run claude
termyte run aider

Before launch, it checks policy, JSONL logs, memory readiness, repository context, and agent availability. The startup banner labels the session runtime mode: limited.

Why limited matters

Full subprocess interception is not guaranteed. Coverage is shell- and platform-dependent, and direct API calls or commands that bypass the governed environment are outside the boundary.

Use termyte doctor before evaluating the experimental runtime on a machine. For stable proof, use the non-executing termyte check path.