[TimInTech]

Recorder files previously used predictable names derived from USER under an insufficiently verified runtime path. A writable or substituted directory could redirect file access or overwrite unrelated files.

This change verifies absolute runtime paths component by component, rejects symlinks and unsafe ownership/permissions, and creates unique private recording jobs. Files are created exclusively as 0600 through pinned directory descriptors; parec writes through an inherited WAV descriptor. PIDFD identity binding and the startup gate are preserved.

Successful WAVs remain available through transcription, including when the recorder is discarded, reused, or destroyed. The transcription worker removes the completed job in its finally block; aborted and failed jobs are cleaned separately.

Validation:

• Full local offscreen suite: 784 passed (Python 3.14.4), including 100 recorder tests.
• Independent security/code review: no confirmed blockers; recorder tests passed independently.
• Isolated regression reproduction against main: nine runtime/path cases fail as expected.
• Compile, shell syntax, diff, tracked-file secret scan, and critical Ruff checks pass. Full Ruff has no new findings relative to main (42 existing findings versus 43).
• Installed libsndfile successfully writes a valid WAV through /proc/self/fd/N in an isolated file test; no productive audio services were changed.

GitHub validation on commit 2bd940e:

• Push and PR CI pass: 784 tests plus four launch smoke tests on each of Python 3.11, 3.12, and 3.14; compile and secret checks pass.
• CodeQL Python (43 rules) and Actions analyses pass; PR analysis reports zero findings and no analysis errors/warnings.
• GitGuardian passes; the complete GitHub diff matches the reviewed local change content.
• Recorder alerts chore(release): bump version to 0.2.25 #6 and feat: Ton/Vorlage-Trennung im Compose-Fenster (Paket J) #26–docs: add v0.8.0 screenshots and update both READMEs (Paket L) #33 have been traced to their old runtime/WAV/PID/error-file accesses. Their main-branch state will be verified again after the squash merge. No alerts have been dismissed.

TTS, Wayland detection, unrelated alerts, versions, tags, and releases are out of scope. The private-directory boundary protects against other UIDs; same-UID/root processes remain outside that boundary. Abrupt application or host termination can leave private recording jobs; this fix adds no global sweeper.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-13T11:01:53.010079Z	2bd940e	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.