Proof Portal
Project overview
Omarchy
ProbeLabs65 findings · 95 requirementsA proof layer — requirements, tests and verified fixes — for two of Omarchy's subsystems: the application menu (launcher scripts, QML model, JSONC config, search and selection) and the lock screen (lock scripts, QML, PAM authentication). Scope is deliberately limited to those components of omacom/omarchy; the rest of the distribution is not covered.
Inbox
Problems reported from outside the audit — kept verbatim, then checked: is the claim real, what does it touch, can it be reproduced? Validated reports are shown in full; items still under responsible disclosure appear only as a count until they are released.
Every report in every tab.
- R-953omarchy dns reports "Cloudflare"/"Google" for a Custom DNS list that merely contains 1.1.1.1 or 8.8.8.8by whitewillow· open at sourcebug
Out of area
Decided· Out of scope - R-4892omarchy-battery-status reports wrong percentage on dual-battery laptops (reads only BAT0)by nick-terrant· closed — completed at sourceReceived
- R-4891sddm.sh strips pam_gnome_keyring.so auth from /etc/pam.d/sddm but not /etc/pam.d/sddm-autologinby swiaam· closed — completed at sourceReceived
- R-4890Codex usage widget shows initialize after Codex CLI 0.150.0 updateby tycameron· closed — completed at sourceReceived
- R-4889Update: Agent and Speaker widgets also become unresponsiveby Rambo176· closed — completed at sourcebugReceived
- R-4888Hermes Desktop HUD still tiles on Hyprland despite default/hypr/apps/hermes.lua float ruleby kvnloo· closed — completed at sourceReceived
- R-954Bar height is rounded to whole logical pixels, ignoring monitor scale — 1px seams at fractional scaleby hdweiss· open at sourcebug
Out of area
Decided· Out of scope - R-4887omarchy-menu-keybindings hangs (100% CPU) when a user config iterates hl.get_loaded_plugins()by evariste1963· closed — completed at sourceFixed
- R-955Plugins cannot declare that they replace a first-party service, so two can own the same surfaceby johnsideserf· open at sourceenhancement
Out of area
Decided· Out of scope - R-956Theme switcher lists a theme twice when a user theme override has no preview imageby johnsideserf· open at sourcebug
Out of area
Decided· Out of scope - R-957omarchy-shell SIGSEGV in QQuickItem::mapToScene while Qt synthesizes a context-menu eventby cuphinex· closed — duplicate at sourcebugduplicate
Out of area
Decided· Out of scope - R-958Stock install does not expose AirPlay / HomePod speakersby ruttydm· open at sourceenhancement
Out of area
Decided· Out of scope - Fixed
- R-960Plymouth: LUKS unlock entry field rendered off-screen for full-screen logosby org-tekeli-borisp· open at sourcebug
Out of area
Decided· Out of scope - R-961omarchy-launch-screensaver: pgrep -f matches unrelated processes, so the screensaver silently no-ops with exit 0by granite4lyfe· open at sourcebug
Out of area
Decided· Out of scope - R-962Power panel invents a "Charge limit / Holding" state on hardware with no charge-control supportby gabamnml· open at sourcebug
Out of area
Decided· Out of scope - R-964Workspace highlight stays on the destination monitor's old workspace after moving a workspace between monitors (focusedmon precedes moveworkspacev2)by sedulam· open at sourcebug
Out of area
Decided· Out of scope - R-965omarchy-network-speedtest can run unbounded and burn huge amounts of data if the panel UI diesby doitn0w· open at sourcebug
Out of area
Decided· Out of scope - R-966Surface outdated mise-managed tools in the barby timolehto· open at sourceenhancement
Out of area
Decided· Out of scope - R-967Brave has no speechSynthesis voices on a default Omarchy install (Google Translate Listen is silent)by fernandofreamunde· open at sourcebug
Out of area
Decided· Out of scope - R-4886omarchy-windows-vm launch silently fails after VM restart due to setgid bit on shared-folder mountby KiloNiner· closed — completed at sourceReceived
- R-4885Laptop with no external monitor has no path from lid-open to dpms enable: panel stays dark after resumeby EitanSchuler· closed — completed at sourcebugReceived
- R-9691password 8.12.34-34 crashes with SIGILL on CPUs without AVX-512by inumineq· open at sourcebugcompatibility
Out of area
Decided· Out of scope - R-4884omarchy toggle bar on/off` actions are invertedby brianrhoads9-netizen· closed — completed at sourcebugReceived
- R-970install/hardware/intel/fred.sh writes a `fred=on` cmdline that Linux 7.1 no longer readsby Faxulous· open at sourcebug
Out of area
Decided· Out of scope - R-971ptl-kernel.sh never removes the stock kernel: `pacman -Rdd linux linux-headers` aborts when linux-headers isn't installed, and `|| true` hides itby Faxulous· open at sourcebug
Out of area
Decided· Out of scope - R-972Google Meet Picture-in-Picture window never floats: pip.lua matches "^Meet - .+" but Chromium uses an en dashby akserikawa· open at sourcebug
Out of area
Decided· Out of scope - R-4883omarchy-windows-vm: shared folder resets setgid, silently breaking the next launchby MykelSIlver· closed — completed at sourceReceived
- R-973omarchy-windows-vm: RDP connects before Windows finishes booting on cold startby MykelSIlver· open at sourcebug
Out of area
Decided· Out of scope - R-4882Windows VM: omarchy-windows-vm launch fails silently ("Failed to start Windows VM") when the shared-folder anchor has the setgid bit setby StefaanBatsele· closed — completed at sourceReceived
- R-974Identical notifications are no longer grouped since the Quickshell notification daemon replaced makoby rdjperron· open at sourcebug
Out of area
Decided· Out of scope - R-975Codex agent collector times out on rateLimits RPC due to buffered reader and 4s deadlineby kcodedev· open at sourcebug
Out of area
Decided· Out of scope - R-976Bluetooth panel: unbounded StartDiscovery retry wedges the controller and kills LE background scanningby bukson· open at sourcebug
Out of area
Decided· Out of scope - R-977o.launch_on_start()/o.launch() breaks Hyprland's [workspace N silent] exec-rule bracket syntaxby je2020je· open at sourcebug
Out of area
Decided· Out of scope - R-978Keyboard layout widget switches Logitech G502 instead of physical keyboardby szalikdev· open at sourcebug
Out of area
Decided· Out of scope - R-979omarchy font set prints omarchy-notification-send usage error when the font name contains a spaceby TheRealGhost007· open at sourcebug
Out of area
Decided· Out of scope - R-4881omarchy debug command missing from dispatcher despite binary existing and workingby TheRealGhost007· closed — completed at sourceReceived
- R-4880omarchy debug --no-sudo --print does not exist in 4.0.2-1by jandal· closed — completed at sourceReceived
- R-980Presentation terminal disappears after Update restarts the shellby falser101· open at sourcebug
Out of area
Decided· Out of scope - R-4879gnome-keyring silently recreated on every password-based SDDM login, orphaning all saved secretsby jandal· closed — completed at sourceReceived
- R-981plugins.md (agent skill) overstates hot-reload for bar-widget plugins — new bar-widget code needs a full shell restart, not just a saveby Ch4pt3r23· open at source
Out of area
Decided· Out of scope - R-4878Omarchy Top-Bar Intermittent Mouse Click Failure — Forensic Investigation Reportby Rambo176· closed — completed at sourcebugReceived
- R-982T2 Macs: battery charge limiting is unreachable — applesmc binds no device, and the t2bce stack has no SMC transportby ratandeepbansal· open at source
Out of area
Decided· Out of scope - R-4877"Brightness slider hidden when DDC fails but ACPI backlight available"by mtmartin3434-dot· closed — completed at sourcebugReceived
- R-983Bluetooth audio dropouts on T2 MacBook Pro 16" 2019 — hci_uart_bcm binds instead of hci_bcm4377by ratandeepbansal· open at sourcebugcompatibility
Out of area
Decided· Out of scope - R-4876Shipped agent skill still points at basecamp/omarchy, so agent duplicate searches silently return nothingby Sean-Mulcahy· closed — completed at sourceReceived
- R-984omarchy-upgrade-to-quattro: retired user configs are backed up but never removed; the abort is reported as successby Sean-Mulcahy· open at sourcebug
Out of area
Decided· Out of scope - R-4875windows vm launch fails when ~/Windows is empty (dockur sets shared mode 2777)by lushprey· closed — completed at sourceReceived
- R-985omarchy-mise-install wrapper's bare 'mise use -g <tool>' doesn't refresh to actual latestby apeltheory· open at sourcebug
Out of area
Decided· Out of scope - R-986quickshell wedges alive (spinning, IPC-dead) after S3 resume on single-GPU NVIDIA desktop; omarchy-restart-shell cannot recover itby noahkrueger· open at sourcebugcompatibility
Out of area
Decided· Out of scope - R-4874Network panel shows fake "Ethernet" instead of Wi-Fi when a VPN/tunnel owns the default route (hides Wi-Fi QR share button)by sal-he· closed — completed at sourceReceived
- R-4873omarchy-brightness-keyboard off saves 0 over the good value, making restore permanently restore darknessby joshdaws· closed — completed at sourceFixed
- R-987Install > Web App displays Done after validation failureby scossar· open at sourcebug
Out of area
Decided· Out of scope - R-4872Saving a local plugin's QML logs "Local plugin changed, reloading" but the bar widget keeps running the old codeby stoa-ops· closed — completed at sourceReceived
- R-988Double-click on the Dictation indicator runs omarchy-restart-shell twice and segfaults quickshell in IpcHandler::updateRegistrationby Ta-noshii· open at sourcebug
Out of area
Decided· Out of scope - R-989omarchy-setup-security-fingerprint doesn't add the clamshell gate to the lock screen's fingerprint PAM configby 1818TusculumSt· open at sourcebug
+2 also reported· show· hide
R-989 is the earliest report of this defect; these reports say the same thing.
- setup security fingerprint wipes the clamshell gate from omarchy-lock-fingerprint R-968filed Sep 4, 2026Closed upstream on 2026-10-11 by the bot omarchybot, as a duplicate (target not recorded).
- Lock-screen fingerprint stack lacks the clamshell gate that omarchy-setup-security-fingerprint writes for sudo/polkit — endless verify-timeout storm on lid-closed machines R-5142filed Oct 4, 2026Open upstream.
Fixed - R-990omarchy-nvim ships a dead plugin URL: `gthelding/monokai-pro.nvim` 404s, so `:Lazy sync` reports fetch failedby marcelobritu· open at sourcebug
Out of area
Decided· Out of scope - R-991setting us,colemak is not setting to colemak but to default us keyboard.by dmuiX· open at sourcebug
Out of area
Decided· Out of scope - R-992`omarchy setup security fingerprint` aborts before configuring PAM when verify can't claim the reader after enroll (Validity VFS5011)by m4dmurd0c· open at sourcebugcompatibility
Out of area
Decided· Out of scope - R-4871Turning off Bluetooth from the panel makes the adapter disappear ("No bluetooth adapter") until Update > Hardware > Bluetooth reloadby SamuelCarriles· closed — completed at sourcebugReceived
- R-4870Plugin code under ~/.config/omarchy/plugins/ never hot-reloads: neither on save nor via rescanPluginsby kidskript3· closed — completed at sourceReceived
- R-4869Display panel cannot toggle monitors: uses `hyprctl keyword`, which the Lua parser rejects (exit 0)by kidskript3· closed — not planned at sourceReceived
- R-993Display panel scale-preset button loses a border edge at 1.25x (not 1.6x)by ljpavlovski· open at sourcebug
Out of area
Decided· Out of scope - R-994Bar tooltip loses a border edge at display scale 1.25x (not 1.6x)by ljpavlovski· open at sourcebug
Out of area
Decided· Out of scope - R-995lock/authentication surface needs hard resource boundsby vip32· open at sourcebugValidated· Reproduced
- R-4868herdr: remote client aborts (SIGABRT) on teardown — panic hook panics on a dead ttyby lucletoffe· closed — completed at sourceReceived
- R-996Menu "Remove app" deletes a shell plugin's launcher but leaves the plugin installed and runningby denlunev· open at sourcebug
Out of area
Decided· Out of scope - R-997Shipped herdr config binds prefix+shift+k to close_workspace, silently shadowing herdr's default swap_pane_upby t1nk333r· open at sourcebug
Out of area
Decided· Out of scope - R-998Hibernate restore hangs on iMac17,1 (amdgpu Bonaire/CIK), and every Limine entry carries resume= — no bootable menu entry left after a failed resumeby madakas· open at source
Out of area
Decided· Out of scope - Decided· Out of scope
- R-1000BrowserColorScheme "device" is rejected by Chromium-family browsersby timolehto· open at sourcebug
Out of area
Decided· Out of scope - R-1001Default Voxtype type mode can corrupt longer Japanese/CJK dictation through wtypeby komagata· open at sourcebug
Out of area
Decided· Out of scope - R-1002Screenshots take ~1.6s on 6K: grim uses default PNG compression (-l 6)by phuclh· open at sourcebug
Out of area
Decided· Out of scope - R-1003"Kernel has been updated. Reboot?" on every update on Arch ARM (linux-aarch64)by ericmoret· open at sourcebug
Out of area
Decided· Out of scope - R-4867omarchy windows vm launch always fails after a fresh install: chmod 0700 doesn't clear the setgid bit the container puts on ~/Windowsby ianswope· closed — completed at sourceReceived
- R-4866Bar layer parks off-screen permanently after "omarchy toggle bar on" — inverted on/off logic in omarchy-toggle-barby abracu· closed — completed at sourcebugReceived
- R-4865Update default agent: Replace legacy Gemini (NPM) with native Antigravity (agy)by overclock98· closed — completed at sourceFixed
- R-1004Hibernate resume fails (nv_pmops_freeze → -EIO) on single-NVIDIA-GPU desktops — initramfs nvidia load blocks the resume hookby unconnect· open at sourcebugcompatibility
Out of area
Decided· Out of scope - R-1005Hibernate on pre-T2 Intel Macs reboots instead of powering offby animadito· open at sourcebugcompatibility
Out of area
Decided· Out of scope - R-1006omarchy hibernation remove leaves /etc/limine-entry-tool.d/resume.conf behind, so the rebuilt UKI still boots with resume= pointing at the deleted swapfileby brenodyego· open at sourcebug
Out of area
Decided· Out of scope - R-1007`omarchy plymouth set` under sudo silently half-applies the theme and still rebuilds the initramfs — no `set -u`, no $OMARCHY_PATH fallbackby tomputer22· open at sourcebug
Out of area
Decided· Out of scope - R-4864Windows VM launch fails: $BASHPID bug in prepare_caller_mounts causes shared_mode check to read wrong fdby blackway· closed — completed at sourceReceived
- R-4863Brave Origin window class not matched by browser.lua opacity regex, stays translucent even when focusedby pkovzz· closed — completed at sourceFixed
- R-1008Top-bar widgets intermittently stop responding to mouse clicksby Rambo176· open at sourcebug
Out of area
Decided· Out of scope - R-1009Encrypted multi-device Btrfs root becomes unbootable when an additional LUKS-backed device is requiredby agustinrojas1· open at sourcebugenhancement
Out of area
Decided· Out of scope - R-1010Battery Size Detection on Lenovo P1 Gen 2 Not Workingby zveroboy152· open at sourcebugcompatibility
Out of area
Decided· Out of scope - R-4862Cloning a service plugin silently breaks its bar indicatorby simonlomax· closed — completed at sourceReceived
- R-1011Fold third-party plugin updates into omarchy update and add an Update Plugins menu entryby dmltallen· open at sourceenhancementReceived
- R-1012Launching a single-instance app hidden on the scratchpad does not reveal itby JoNil· open at source
Out of area
Decided· Out of scope - R-4861Bar's Bluetooth widget can't be turned back on after off, when rfkill cuts radio power (ThinkPad ACPI)by oogala-boogala· closed — completed at sourceReceived
- R-4860SoundWire bus clash/parity errors isolated to one link cause speaker dropout on Dell XPS 14 2026 (Panther Lake/HURACAN)by vitillo· closed — completed at sourceReceived
- R-1013Electron apps other than browsers aren't pinned to gnome-libsecret: migrated Signal profiles become unrecoverable on Hyprlandby johnfire· open at sourcebug
Out of area
Decided· Out of scope - R-1014omarchy-windows-vm launch/remove fail silently: shared-folder anchor loses required 700 mode after container startby mshahid019· closed — completed at sourcebugReceived
- R-1015Nautilus segfaults (double-free of GMenu) when opening a new windowby UstymUkhman· open at sourcebug
Out of area
Decided· Out of scope - R-4859Agents panel: status banner is gated on `usageStatusText` but renders `authHelpText`, producing an empty warning boxby johnfire· closed — completed at sourceReceived
- R-1016plugins.md: service-plugin constant edits need `omarchy restart shell`, not `rescanPlugins`by johnfire· open at sourcebug
Out of area
Decided· Out of scope - R-1017`{{ muted }}` is used as both a text color and a fill in the generated VS Code themeby ivanskodje· open at sourcebug
Out of area
Decided· Out of scope - R-1018Multi-monitor: every panel plugin registers its IpcHandler once per bar, logging a "Handler was registered but will not be used" WARN per extra screenby lucletoffe· open at sourcebug
Out of area
Decided· Out of scope - R-1019Agents panel freezes permanently when inotify quota is exhausted: FileView watches die on the next atomic record rewrite and never re-armby lucletoffe· closed — completed at sourcebugReceived
- R-4858Bluetooth panel cannot pair passkey devices (keyboards) — no BlueZ agent registered, failure is silentby sk-hansen· closed — completed at sourceReceived