tier1Gate TOCTOU: non-atomic check-then-reset enables concurrent runs
Finding PUB-F016 · f6b87aafab0a
MEDIUMconfirmedexcessive-agencyopus48
- Framework
- agentic
- Priority score
- 0.5800
- Reachability
- unknown
- Chain depth
- 1
- Discovered
- Jun 11, 2026, 02:20 PM
Description
The gate check and reset are not atomic, so two concurrent runs can both observe an armed gate and proceed past per-run budget controls.
Validation
No validation rationale recorded.