This optional dependency supplies the native patch engine for
@fungi.computer/spore. Install the CLI to use it in a terminal or ACP editor.
Requires glibc 2.35 or newer.
The engine uses pinned Codex sources with Fungi's rooted invocation wrapper.
Upstream terms are in LICENSE.codex and THIRD_PARTY_NOTICES.
Linux also carries the pinned bubblewrap engine, both permission-mode seccomp filters and build
provenance. The runtime verifies them against the digests embedded in Fungi's
built JS, never writable sidecars. Its unmodified upstream source is in SOURCE.bubblewrap.tar.xz;
the recipe is in bwrap-build-source. Terms are in LICENSE.bubblewrap
and LICENSE.libcap; the maintained filter generator's terms are in
LICENSE.sandbox-runtime.
Workspace permits host networking and bounded writable package caches; Read-only blocks direct command networking and restricts writes to Agent temp. Commands can still read other files on this computer, and this is not a security boundary against a hostile program.