Proof Portal
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Fido 2 authenticator breaks polkit ui experience
Reported by mattrayner · filed Aug 2, 2026 · open at source
At a glance
- 1 · What is claimed?
- Only the report text below — no validator has restated it as checkable claims yet.
- 2 · What does it affect?
- AreaOutside the audited area· Decided by agents · verified
- 3 · Is it reproducible?
- No validation has been run yet.
- 4 · What remains unclear?
- Not validated yet: no claims, no reproducer.
- 5 · What happens next?
- Decided by agents and verified by a second, independent agent — see the decision.
Original report
System details
Framework 13, AMD Ryzen AI 7 350, Omarchy 4.0.0.r1508.g12af188-1.8
What's wrong?
When using a Yubikey Fido 2 authenticator, and fingerprint, and password for authentication, the current Polkit configuration doesnt work as expected.
When PAM is configured to use the fido adapter first (before the fingerprint), you are unable to progress the flow as a fingerprint icon is shown, but neither the fido adapter, or fingerprint sensor work.
If you configure the fingerprint first, it works until timeout (or if you fail the fingerprint), then it falls through to FIDO and gets stuck.
I've opened a PR #6515 with a fix which adds support for fingerprint, fido/security key, and password. It maintains the laptop open/closed functionality and adds this.
Additionally, I noticed a situation where the system would flash up the full password prompt before showing either the fingerprint or security key compact display.
This is because there can be a delay from PAM reporting the fingerprint/security key requirement due to USB, etc.
View raw text
### System details Framework 13, AMD Ryzen AI 7 350, Omarchy 4.0.0.r1508.g12af188-1.8 ### What's wrong? When using a Yubikey Fido 2 authenticator, and fingerprint, and password for authentication, the current Polkit configuration doesnt work as expected. When PAM is configured to use the fido adapter first (before the fingerprint), you are unable to progress the flow as a fingerprint icon is shown, but neither the fido adapter, or fingerprint sensor work. If you configure the fingerprint first, it works until timeout (or if you fail the fingerprint), then it falls through to FIDO and gets stuck. I've opened a PR #6515 with a fix which adds support for fingerprint, fido/security key, and password. It maintains the laptop open/closed functionality and adds this. Additionally, I noticed a situation where the system would flash up the full password prompt before showing either the fingerprint or security key compact display. This is because there can be a delay from PAM reporting the fingerprint/security key requirement due to USB, etc.
Validation
Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.
Linked
Not linked to any known issue, other report or change yet.
Decision
Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.
- Out of scopeDecided by agents · verified · 2026-10-09 02:15 UTC