Technical Documentation

Threadbare File Checker — Internal Reference

race-check binary

The /usr/local/bin/race-check utility is invoked via sudo. It:

Reads SUDO_UID to determine the original caller's identity
Calls access(path, R_OK) as the caller to verify read permission
Performs integrity pre-processing (may take a moment)
Opens and reads the file as root

$ sudo -l
(root) NOPASSWD: /usr/local/bin/race-check *

$ sudo /usr/local/bin/race-check /path/to/file

SSH Access

Credentials for the weaver account are in the service config at /opt/threadbare/.env.

Known Limitations

The binary does not handle symlinks specially — path is resolved at each operation independently.
There is a measurable delay between the permission check and the actual file read. This reflects real-world integrity check overhead.
The check and the read are two separate syscalls. The state of the filesystem between them is not guaranteed to be identical.