reason-machines/reason-network

Review signals: 1 connection review, 6 download and execute, 2 known vulnerability, 1 outside write.

Reviewed as expected for a test run: opened pseudo-terminals; tests pointed at /nonexistent, a folder that does not exist, so nothing could be written; wrote only to its own open file handles.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 18 distinct locations. 470 attributed processes.

Source contains download and execute; review its purpose. install.sh 6 findings.

OSV reports a known vulnerability in this dependency version. 2 distinct locations. 2 findings.

Repository processes attempted these writes outside documented output/cache paths. /nonexistent 4 attributed processes.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The MCP server gives agents a list_team tool: Real input produced the expected result: you are alice on box

  Source: Agents get three tools, `list_team`, `send_message` and `ask_user`, plus

  Input: {"tool": "list_team", "arguments": {}}

  Expected: the team listing with the local member alice

  Command: <guest-path> mcp tools/call {"tool": "list_team", "arguments": {}}

  Observed: you are alice on box\nalice · box · this machine\n workspace-agent agent up 0s reason-machines/reason-network@master pull · ← you\nInvite people with this line: Join the Reason Network: https://reasonmachines.com/network/join/#rn1-7AIljJXkslkGuRIkBkbKwbSN6VnJ28uhhMUHPUCcwzUEZGVtbwAuaHR0cHM6Ly9yZWxheS1zZm8xLmNvbXB1dGUucmVhc29ubWFjaGluZXMuY29tLwEErBSKRq3YXewhStPipPtT2aZ2nLTY2Tko7fNEHjYrmV21vh84Bs0\npush = sees messages right away, even when idle · turn = at its next step · pull = when it checks\n"}], "isError": false}

• reason-network who shows who is around on the team: Real input produced the expected result: team demo · you are alice on box

  Source: reason-network who

  Input: who

  Expected: the team header naming alice on box

  Command: <guest-path> who

  Observed: team demo · you are alice on box ● alice · box · this machine no sessions

Examples

• Format check passes as the README build line starts: command completed successfully with no output

  Source: README.md Build section

  Input: cargo fmt --check

  Expected: no formatting diff

  Command: <guest-path> fmt --check

• Clippy with warnings denied passes: command completed successfully

  Source: README.md Build section

  Input: cargo clippy --all-targets -- -D warnings

  Expected: Finished without warnings

  Command: <guest-path> clippy --all-targets -- -D warnings

  Observed: Finished `dev` profile [unoptimized + debuginfo] target(s) in 1.95s

• The repository unit and integration tests pass: command completed successfully

  Source: README.md Build section

  Input: cargo test

  Expected: 202 unit tests pass

  Command: <guest-path> test

  Observed: nt_change_when_proofs_expire ... ok test result: ok. 202 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 6.46s running 2 tests test an_unsigned_install_takes_any_build ... ok test a_signed_install_takes_only_its_teams_builds ... ok test result: ok. 2 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 1.87s Finished `test` profile [unoptimized + debuginfo] target(s) in 2.03s Running unittests src/main.rs (target/debug/deps/reason_network-26d52bea24eb6ea4) Running tests/install_script.rs (target/debug/deps/install_script-756caa08fcf6e16e)

• The hook flows pass against an isolated daemon: command completed successfully

  Source: README.md Build section (python3 tests/e2e/hooks.py)

  Input: python3 tests/e2e/hooks.py

  Expected: 63 of 63 hook checks pass

  Command: python3 tests/e2e/hooks.py

  Observed: ion as the sender was told (delivered) PASS: push, inbox listed after-list-now: once listed, mail goes into it PASS: push, inbox listed after-list-later: 'push l 0' reached the session as the sender was told (delivered) PASS: push, inbox listed after-list-later: 'push l 1' reached the session as the sender was told (delivered) PASS: push, inbox listed after-list-later: once listed, mail goes into it PASS: an MCP server collects no zombies across daemon restarts PASS: …and doesn't race to start daemons PASS: hook exits 0 and prints nothing when Reason Network is broken 63/63 hook checks passed

• The guided team setup works through a pseudo-terminal: command completed successfully

  Source: README.md Build section (python3 tests/e2e/guided.py)

  Input: python3 tests/e2e/guided.py

  Expected: 9 of 9 guided checks pass

  Command: python3 tests/e2e/guided.py

  Observed: ) and get the team link PASS: agents found were set up without asking PASS: a friend joins with the link by typing only their name PASS: the same link works for the next friend; a taken name is asked again PASS: `Reason Network` after joining shows the team instead of asking again PASS: a bad link is caught at the prompt, and Ctrl-C exits cleanly PASS: joining it, a person sees the name as typed PASS: joining it, an agent in a terminal sees the name defanged PASS: joining it, an agent in a terminal sees the name defanged 9/9 guided checks passed (state in /tmp/reason-network-guided-wle08107)

• Codex delivery routing works against a fake CLI: command completed successfully

  Source: README.md Build section (python3 tests/e2e/codex_busy.py)

  Input: python3 tests/e2e/codex_busy.py

  Expected: all 35 checks pass

  Command: python3 tests/e2e/codex_busy.py

  Observed: ued at the interrupt, while its confirmation may come PASS: never confirmed: queued once that is overdue PASS: never confirmed: …once PASS: long gap: mail is still waiting for the hook, not queued PASS: long gap: the next PostToolUse shows it, once PASS: long tool call: mail during it is not queued behind the turn PASS: long tool call: the PostToolUse after it shows the mail, once PASS: long turn: all 7 messages arrived at the next PostToolUse PASS: long turn: none queued PASS: restart: mail waiting for a running turn reaches the next PostToolUse PASS: restart: …and is not queued 35/35 passed

Local or hosted: local

Build reason-network from source with cargo, run its checks, and run a local MCP server that lists a team created on this machine

cd <guest-path> && pwd && ls -la && git status 2>&1 | head -3; id -u; python3 --version; cat /etc/os-release | head -2; ls /inputs 2>&1
cd <guest-path> && ls -la; find . -maxdepth 2 -iname 'readme*' | head; ls <guest-path> 2>&1
cd <guest-path> && cat README.md
cd <guest-path> && git init -q && git remote add origin https://github.com/reason-machines/reason-network && timeout 120 git fetch --depth 1 origin b3557ff454cd26a04c2a18804ba83ae5db8b119d 2>&1 | tail -5; git reset --mixed FETCH_HEAD 2>&1 | tail -3; git log --oneline -1; git status --short | head; ls .coldpass; which cargo rustc node npm uv 2>&1; cargo --version 2>&1
cd <guest-path> && cat install.sh | head -150; echo ---; cat CONTRIBUTING.md; ls tests tests/*; cat Cargo.toml | head -40
cd /tmp && sudo -n true && echo SUDO_OK; (curl -fsSL https://sh.rustup.rs -o /tmp/rustup-init.sh && sh /tmp/rustup-init.sh -y --profile minimal --default-toolchain stable 2>&1 | tail -5); ls ~/.cargo/bin 2>&1; ~/.cargo/bin/cargo --version 2>&1
export PATH=$HOME/.cargo/bin:$PATH; sudo -n apt-get update -qq 2>&1 | tail -2; sudo -n DEBIAN_FRONTEND=noninteractive apt-get install -y -qq build-essential pkg-config 2>&1 | tail -2; which cc; rustup component add clippy rustfmt 2>&1 | tail -2
export PATH=$HOME/.cargo/bin:$PATH; cd <guest-path> && cargo fmt --check 2>&1 | tail -5; echo FMT=$?; timeout 3000 cargo clippy --all-targets -- -D warnings 2>&1 | tail -15
export PATH=$HOME/.cargo/bin:$PATH; cd <guest-path> && nohup cargo test > /tmp/cargo_test.log 2>&1 &
sleep 240; tail -5 /tmp/cargo_test.log
grep -E "test result|FAILED|panicked" /tmp/cargo_test.log; pgrep -f "cargo test" | head -2; export PATH=$HOME/.cargo/bin:$PATH; cd <guest-path> && cargo build 2>&1 | tail -2; ls -la target/debug/reason-network && target/debug/reason-network --version; target/debug/reason-network --help 2>&1 | head -40
cd <guest-path> && for f in tests/e2e/hooks.py tests/e2e/guided.py tests/e2e/codex_busy.py; do echo "== $f"; head -30 $f; done; echo; grep -n "reason-network\|def run\|HOME" tests/e2e/hooks.py | head -20
cd /tmp && timeout 60 curl -sS -o /tmp/ri.sh -w "%{http_code}\n" https://reasonmachines.com/install.sh; ls -la /tmp/ri.sh 2>&1; timeout 30 curl -sS -o /dev/null -w "%{http_code}\n" https://github.com/reason-machines/reason-network/releases/latest/download/reason-network-x86_64-unknown-linux-musl.tar.gz.sha256 2>&1; echo "proxy=${HTTPS_PROXY:-${https_proxy:-none}}"
cd <guest-path> && REASON_NETWORK_NO_PROMPT=1 sh install.sh 2>&1 | tail -8; echo rc=$?; ls -la ~/.local/bin/reason-network 2>&1
cd <guest-path> && (python3 tests/e2e/hooks.py > /tmp/e2e_hooks.log 2>&1; echo "EXIT $?" >> /tmp/e2e_hooks.log; python3 tests/e2e/guided.py > /tmp/e2e_guided.log 2>&1; echo "EXIT $?" >> /tmp/e2e_guided.log; python3 tests/e2e/codex_busy.py > /tmp/e2e_codex.log 2>&1; echo "EXIT $?" >> /tmp/e2e_codex.log) > /dev/null 2>&1 &
sleep 200; tail -4 /tmp/e2e_hooks.log; tail -4 /tmp/e2e_guided.log 2>/dev/null
B=<guest-path>; $B init --help 2>&1 | head -30; echo ---; $B send --help 2>&1 | head -30; echo ---; $B who --help | head -12; echo; grep -n "REASON_NETWORK_HOME\|REASON_NETWORK_MACHINE\|NO_SERVICE\|NO_MDNS" <guest-path> | head -12
B=<guest-path>; mkdir -p /tmp/rn-demo && export REASON_NETWORK_HOME=/tmp/rn-demo/home REASON_NETWORK_NO_MDNS=1 REASON_NETWORK_NO_SERVICE=1 REASON_NETWORK_MACHINE=box HOME=/tmp/rn-demo/fakehome; mkdir -p $HOME; timeout 120 $B init demo --as alice --no-setup 2>&1 | tail -15; echo rc=$?; timeout 30 $B who 2>&1 | tail -5; timeout 30 $B doctor 2>&1 | tail -8
cd <guest-path> && grep -rn "fn list_team\|fn send_message\|fn check_inbox\|fn ask_user" src | head; grep -rn "struct.*Args\|schemars" src/mcp*.rs 2>/dev/null | head -20; ls src
cd <guest-path> && sed -n 36,90p src/mcp.rs; sed -n 136,160p src/mcp.rs
cd /tmp/rn-demo && export REASON_NETWORK_HOME=/tmp/rn-demo/home REASON_NETWORK_NO_MDNS=1 REASON_NETWORK_NO_SERVICE=1 REASON_NETWORK_MACHINE=box HOME=/tmp/rn-demo/fakehome; B=<guest-path>; (printf '%s\n' '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"t","version":"0"}}}' '{"jsonrpc":"2.0","method":"notifications/initialized"}' '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"list_team","arguments":{}}}'; sleep 3) | timeout 30 $B mcp 2>/tmp/rn-demo/mcp.err | cut -c1-900; echo; head -5 /tmp/rn-demo/mcp.err
sleep 60; tail -4 /tmp/e2e_codex.log; cd <guest-path> && grep -rn "interval\|tokio::time::interval\|cron\|--once\|--now\|every(" src --include=*.rs | grep -v "^src/.*test" | head -20
cd <guest-path> && grep -rn "sleep\|interval(\|sleep_until" src --include=*.rs | head -20; ls src/daemon
cd <guest-path> && grep -c "Agents get three tools, \`list_team\`, \`send_message\` and \`ask_user\`, plus" README.md; grep -c "reason-network who" README.md; grep -c "^- \*\*Every agent on the team" README.md; ls -la <guest-path>; <guest-path> --version; mkdir -p .coldpass && ls -la .coldpass
cd <guest-path> && B=<guest-path> && ENV='{"REASON_NETWORK_HOME":"/tmp/rn-demo/home","REASON_NETWORK_NO_MDNS":"1","REASON_NETWORK_NO_SERVICE":"1","REASON_NETWORK_MACHINE":"box","HOME":"/tmp/rn-demo/fakehome"}' && CARGO=<guest-path> && CENV='{"HOME":"<guest-path>","PATH":"<guest-path>"}' && W=<guest-path> && cat > probe.json <<EOF
{"kind":"mcp","argv":["$B","mcp"],"cwd":"$W","env":$ENV,"tool":"list_team","arguments":{},"expected_text":"you are alice on box"}
EOF
cat > claims.json <<EOF
[
{"kind":"claim","claim":"The MCP server gives agents a list_team tool","source":"Agents get three tools, \`list_team\`, \`send_message\` and \`ask_user\`, plus","input":"no arguments","expected":"the team listing with the local member alice","probe_kind":"mcp","argv":["$B","mcp"],"env":$ENV,"tool":"list_team","arguments":{},"expected_text":"you are alice on box","cwd":"$W"},
{"kind":"claim","claim":"reason-network who shows who is around on the team","source":"reason-network who","input":"who","expected":"the team header naming alice on box","probe_kind":"cli","argv":["$B","who"],"env":$ENV,"expected_text":"team demo · you are alice on box","cwd":"$W"}
]
EOF
cat > examples.json <<EOF
[
{"kind":"example","claim":"Format check passes as the README build line starts","source":"README.md Build section","input":"cargo fmt --check","expected":"no formatting diff","argv":["$CARGO","fmt","--check"],"cwd":"$W","env":$CENV},
{"kind":"example","claim":"Clippy with warnings denied passes","source":"README.md Build section","input":"cargo clippy --all-targets -- -D warnings","expected":"Finished without warnings","argv":["$CARGO","clippy","--all-targets","--","-D","warnings"],"cwd":"$W","env":$CENV,"expected_text":"Finished"},
{"kind":"example","claim":"The repository unit and integration tests pass","source":"README.md Build section","input":"cargo test","expected":"202 unit tests pass","argv":["$CARGO","test"],"cwd":"$W","env":$CENV,"expected_text":"test result: ok. 202 passed"},
{"kind":"example","claim":"The hook flows pass against an isolated daemon","source":"README.md Build section (python3 tests/e2e/hooks.py)","input":"python3 tests/e2e/hooks.py","expected":"63 of 63 hook checks pass","argv":["python3","tests/e2e/hooks.py"],"cwd":"$W","expected_text":"63/63 hook checks passed"},
{"kind":"example","claim":"The guided team setup works through a pseudo-terminal","source":"README.md Build section (python3 tests/e2e/guided.py)","input":"python3 tests/e2e/guided.py","expected":"9 of 9 guided checks pass","argv":["python3","tests/e2e/guided.py"],"cwd":"$W","expected_text":"9/9 guided checks passed"},
{"kind":"example","claim":"Codex delivery routing works against a fake CLI","source":"README.md Build section (python3 tests/e2e/codex_busy.py)","input":"python3 tests/e2e/codex_busy.py","expected":"all 35 checks pass","argv":["python3","tests/e2e/codex_busy.py"],"cwd":"$W","expected_text":"35/35 passed"}
]
EOF
cat > cycles.json <<'EOF'
{"detected":false,"reason":"Inspected README.md, src/main.rs subcommands, src/daemon/*, src/mcp.rs and tests. The README documents no cron, schedule, --once or --now mode. The only timed code is reconnect/retry sleeps inside the daemon (src/net.rs, src/daemon/teamops.rs) and the macOS tray refresh (src/tray.rs), none of them a user-triggered product cycle. Messages wait for an offline recipient and are delivered when they return, which is event-driven rather than a schedule.","checks":[]}
EOF
for f in probe.json claims.json examples.json cycles.json; do python3 -I -m json.tool $f >/dev/null && echo "$f ok"; done
cd <guest-path> && <env-var>=<guest-path> timeout 3000 python3 -I <guest-path> --validate --replay 2>&1 | tail -60; echo rc=${PIPESTATUS[0]}
ps -eo pid,args | grep -i "reason-network" | grep -v grep | head; for p in $(pgrep -f "reason-network daemon|reason-network-daemon|target/debug/reason-network"); do echo kill $p; kill $p 2>/dev/null; done; sleep 3; ps -eo pid,args | grep -i "reason-network" | grep -v grep | head -3; echo done
ps -eo pid,args | grep "reason" | grep -v grep; echo "---"; ps -eo pid,args | grep -c "reason-network"; echo ok
cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{
  "outcome": "working",
  "fault_owner": null,
  "operation": "Build reason-network from source with cargo, run its checks, and run a local MCP server that lists a team created on this machine",
  "operation_scope": "Linux x86_64 guest (Ubuntu 24.04, Python 3.12.3). Local single-machine team in an isolated REASON_NETWORK_HOME (/tmp/rn-demo). Not exercised: the two-machine e2e (needs internet and a second machine), real Reason sign-in, real agent sessions, and the hosted MCP endpoint.",
  "steps": [
    "git init; git remote add origin https://github.com/reason-machines/reason-network; git fetch --depth 1 origin b3557ff454cd26a04c2a18804ba83ae5db8b119d; git reset --mixed FETCH_HEAD",
    "Installed prerequisites: rustup (stable, cargo 1.99.1, clippy and rustfmt components) and sudo apt-get install build-essential pkg-config (for the C linker)",
    "cargo fmt --check",
    "cargo clippy --all-targets -- -D warnings",
    "cargo test (202 unit tests and 2 install-script tests passed)",
    "cargo build (produces target/debug/reason-network)",
    "python3 tests/e2e/hooks.py (63/63 passed)",
    "python3 tests/e2e/guided.py (9/9 passed)",
    "python3 tests/e2e/codex_busy.py (35/35 passed)",
    "sh install.sh with REASON_NETWORK_NO_PROMPT=1 (repo installer; installed reason-network 0.12.11 to <guest-path>)",
    "reason-network init demo --as alice --no-setup (with REASON_NETWORK_HOME=/tmp/rn-demo/home)",
    "reason-network who",
    "reason-network mcp, then tools/call list_team with {} (returned 'team demo · you are alice on box')",
    "<env-var>=<guest-path> python3 -I <guest-path> --validate --replay (valid, no problems, replay PASS)"
  ],
  "deviations": [
    "Did not run the README's 'Get started' line (curl -fsSL https://reasonmachines.com/install.sh | bash -s -- network). It opens a browser sign-in, which this guest cannot complete. Instead ran the pinned repo's install.sh with REASON_NETWORK_NO_PROMPT=1, which installs the engine only.",
    "The installer put a released 0.12.11 binary in <guest-path> Probes and examples use the source-built target/debug/reason-network, as the README build path does.",
    "Used 'reason-network init --no-setup' so no agent configs were touched.",
    "No cargo in the VM at first: installed rustup via sh.rustup.rs (stable toolchain). No C linker at first: installed build-essential via apt.",
    "Did not run tests/e2e/two_machines.py (README says it needs internet and two machines) or the regional_relays, mixed_versions, names, proofs e2e scripts, which the README does not list in its Build block.",
    "The cargo test output lists 202 + 2 passing tests; no failures."
  ],
  "stuck_step": null,
  "main_blocker": null,
  "plain_failure": null,
  "suggested_fix": null
}
EOF
python3 -I -m json.tool .coldpass/report.json > /dev/null && echo report_ok; <env-var>=<guest-path> timeout 3000 python3 -I <guest-path> --validate --replay 2>&1 | python3 -I -c "import json,sys; d=json.load(sys.stdin); print('valid',d['valid'],'problems',d['problems'],'replay',d['replay']['status'])"