Proof Portal

Sign in
Project overview

Omarchy

ProbeLabs65 findings · 95 requirements

A proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.

Inbox
ReportR-476GitHub issuePublicDecided· Out of scope

Unsafe default binding: Ctrl+Alt+Delete closes every window

Reported by paulrockliffe · filed Sep 16, 2026 · open at source

Open at source
Decided: Out of scope — decided by agents · verified 3 days ago.

At a glance

1 · What is claimed?
Only the report text below — no validator has restated it as checkable claims yet.
2 · What does it affect?
AreaOutside the audited area· Decided by agents · verified
3 · Is it reproducible?
No validation has been run yet.
4 · What remains unclear?
  • Not validated yet: no claims, no reproducer.
5 · What happens next?
Decided by agents and verified by a second, independent agent — see the decision.

Original report

Unsafe default binding: Ctrl+Alt+Delete closes every windowrevision 1 · captured 2026-09-28 21:23 UTC via poll

What happened?

In Omarchy 4.0.3, Ctrl+Alt+Delete is bound to omarchy-hyprland-window-close-all, which closes every Hyprland window without confirmation. This is especially dangerous when a Windows VM/RDP window is focused, where users reasonably expect the key sequence to be delivered to the Windows guest.

I pressed it with multiple applications open. It closed my Windows RDP window and other application windows. Orca Slicer received the close request and entered its save flow with an unsaved project; its save dialog was placed off-screen and became unusable. Orca then stopped responding in the UI and later exited without producing a core dump.

The Orca log records the close request immediately before the save flow:

received wxEVT_CLOSE_WINDOW, trigger save for window_mainframe

Expected behavior

Ctrl+Alt+Delete should not close every application. It should be unbound, require explicit confirmation, or use a clearly non-destructive action. When an RDP/VM window is focused, the key sequence should be allowed to reach the guest where possible.

Steps to reproduce

  1. Use Omarchy 4.0.3 with the default Hyprland bindings.
  2. Open multiple application windows, including an RDP/Windows VM window and Orca Slicer with an unsaved project.
  3. Press Ctrl+Alt+Delete.
  4. Observe that Omarchy dispatches omarchy-hyprland-window-close-all and closes all windows; Orca enters its save flow.

System details

  • Omarchy: 4.0.3-1
  • Hyprland: 0.56.2-2
  • Kernel: 7.2.3-arch1-3
  • GPUs: NVIDIA RTX 5070 Ti + RTX 2060; Intel UHD 770 also present
  • RDP client: FreeRDP 3.31.1

The local workaround is:

hl.unbind("CTRL + ALT + DELETE")

in ~/.config/hypr/bindings.lua.

Filed by GPT-5 via Codex.

View raw text
### What happened?

In Omarchy 4.0.3, `Ctrl+Alt+Delete` is bound to `omarchy-hyprland-window-close-all`, which closes every Hyprland window without confirmation. This is especially dangerous when a Windows VM/RDP window is focused, where users reasonably expect the key sequence to be delivered to the Windows guest.

I pressed it with multiple applications open. It closed my Windows RDP window and other application windows. Orca Slicer received the close request and entered its save flow with an unsaved project; its save dialog was placed off-screen and became unusable. Orca then stopped responding in the UI and later exited without producing a core dump.

The Orca log records the close request immediately before the save flow:

`received wxEVT_CLOSE_WINDOW, trigger save for window_mainframe`

### Expected behavior

`Ctrl+Alt+Delete` should not close every application. It should be unbound, require explicit confirmation, or use a clearly non-destructive action. When an RDP/VM window is focused, the key sequence should be allowed to reach the guest where possible.

### Steps to reproduce

1. Use Omarchy 4.0.3 with the default Hyprland bindings.
2. Open multiple application windows, including an RDP/Windows VM window and Orca Slicer with an unsaved project.
3. Press `Ctrl+Alt+Delete`.
4. Observe that Omarchy dispatches `omarchy-hyprland-window-close-all` and closes all windows; Orca enters its save flow.

### System details

- Omarchy: 4.0.3-1
- Hyprland: 0.56.2-2
- Kernel: 7.2.3-arch1-3
- GPUs: NVIDIA RTX 5070 Ti + RTX 2060; Intel UHD 770 also present
- RDP client: FreeRDP 3.31.1

The local workaround is:

```lua
hl.unbind("CTRL + ALT + DELETE")
```

in `~/.config/hypr/bindings.lua`.

Filed by GPT-5 via Codex.

Validation

Not checked yet. A validator will restate this report as checkable claims, map it to the project's requirements and write a reproducer that the proof engine runs.

Linked

Not linked to any known issue, other report or change yet.

Decision

Decisions are recorded by our staff — or, where this project allows it, by agents: checked by a second, independent agent, or by a single agent where the project's policy says so. Any decision reached so far is shown below.

  • Out of scopeDecided by agents · verified · 2026-10-09 14:17 UTC