# Sibyl Migration Security Round 11 2026-06-03

Critical-candidate checks for migration backup symlink disclosure.

## Summary

| Metric | Count |
|---|---:|
| Total | 3 |
| PASS | 0 |
| FAIL | 3 |

## Runs

| Run | Status | Checks | Reason |
|---|---:|---:|---|
| run-2026-06-03-migrate-run248-project-agents-symlink-secret-backed-up | FAIL | 0 / 1 | project_symlink_not_followed_into_backup; sibyl migrate follows a project AGENTS.md symlink during backup, copying an outside secret file into the migration backup that the extraction prompt later tells the agent to read. |
| run-2026-06-03-migrate-run249-hermes-memory-dir-symlink-secret-tree-backed-up | FAIL | 0 / 1 | memory_dir_symlink_not_followed_into_backup; sibyl migrate follows a symlinked ~/.hermes/memory directory during backup and copies an outside secret tree into the migration backup. |
| run-2026-06-03-migrate-run250-symlink-secret-migration-persisted-to-sibyl | FAIL | 0 / 1 | symlink_secret_not_persisted_to_sibyl_memory; Following the migration flow can persist a secret copied from a symlinked project AGENTS.md into Sibyl memory. |