Notably a major security regression which leads me to believe they have a misunderstanding of security in the age of ai. The precedence order for configuration loading is the exact opposite it needs to be. Buyer be warned, I stopped using opencode because of what I see in v2, there is a lot more beyond this. tl;dr they are trying to be too much, more like an IDE, and that is not what I personally want in a harness. However the security issue is of real concern in our organization. We are not upgrading to v2.

https://news.ycombinator.com/item?id=50075319

https://github.com/anomalyco/opencode/pull/54921

If you're interested in a description of the security issue, I have written more details in a feature request for the Pi harness.

https://github.com/earendil-works/pi/issues/10895#issuecomme...