This fundamentally breaks our security posture capability for harness configuration, ending our ability to prevent company policy breaking changes by man, machine, or third party repo.

We may be a minority in using /etc/opencode in this way, but it has shaken my trust that they understand security in the Ai era or the needs of enterprise users.