Skip to content
The CubeBook 0.1.0 · alpha

Known limits

No. 017

The known limits of The Cube 0.1.0, as its release notes list them.

  • macOS and Windows: cube check runs the engine’s own checks and skips the kit’s checks with a warning (KIT_CHECKS_SKIPPED): the check that a program is safe to run exists only for Linux so far. The git hooks (and cube setup) refuse there until a later release adds the macOS and Windows forms, and so does cube doctor. The other commands work.
  • Per-user install. The installer puts cube in your home folder. The git hooks run a program your account owns only after you opt it in (cube setup prints the git config --global --add cube.allowUserOwned command), and then every hook warns that it is not tamper-proof: an agent that runs as your account could replace the program or change your git settings. An install owned by root, which closes this gap, comes in a later release.
  • No self update. There is no cube self update and no update check yet. To update, run the installer again.
  • Signatures. cube itself does not check signatures yet. The installer checks the manifest’s minisign signature only when the minisign program is installed. It always checks GitHub’s record of the release (immutable, and the same SHA-256 digest as the manifest), which is a second, independent source, and the SHA-256 of the download. The release that brings cube self update checks signatures in cube itself.
  • Kits and packs. They are plain archives, not yet signed bundles with an index.
  • No code signing. The programs are not code-signed in the alpha and beta. Windows Smart App Control can block them. On macOS, a copy downloaded with a web browser is quarantined; the installer downloads with curl, which does not quarantine it, so use the install command.
  • Agents. cube and its git hooks work with any agent that runs shell commands. The kits’ agent guidance (skills, helper agents, slash commands) uses Claude Code’s .claude/ layout for now; other agents get the checks and the hooks but may not load that guidance on their own.
  • Python. The kit’s checks need Python 3 with PyYAML.
  • Not yet. cube setup mergiraf, the AGENTS.md target of cube skill render, and acknowledging agent acts in cube inbox.